be sent via the server - see the RFC extract quoted over) and if that's the case, looking at the Issuer and perhaps the AKI area to determine which Root CA issued this primary intermediate CA certificate. Set a https://ca-none.com/