be sent with the server - begin to see the RFC extract quoted earlier mentioned) and when that's the case, taking a look at the Issuer and probably the AKI industry to confirm which Root CA issued this primary https://ca-none.com/