Skip to content
Free public beta until December 4, 2026: every course is open, no card needed. After that, the first chapter of each course stays free and full access is a one-time $39 ($19 for up to 100 founding members chosen for helpful feedback). Your progress is kept. How the beta works

certificate chain

Leaf, then intermediate, then a root the client already trusts, each signed by the next.

A certificate chain links a server's leaf certificate through intermediate CA certificates to a self-signed root in the client's trust store; RFC 5280 path validation checks each link.

Examples

  • The broker's leaf certificate is signed by an intermediate, which is signed by a root already in the sensor's trust store.

  • A broker that sends only its leaf, without the intermediate, breaks the chain and the sensor rejects the connection.

See also

trust store Subject Alternative Name certificate authority
Read the full section →