be sent because of the server - see the RFC extract quoted earlier mentioned) and when that's the situation, thinking about the Issuer and probably the AKI industry to verify which Root CA issued this first https://ca-none.com/