◄ Wiki / Crypto
certificate chain
An ordered sequence of certificates linking the one you're checking up to a root you already trust.
A server's certificate is usually signed not by a root authority directly but by an intermediate, which is in turn signed by a root. The certificate chain is that ordered list from the end-entity (leaf) up to the trust anchor. Verifying it means checking each signature link in turn until you reach a certificate you inherently trust.
See also
- chain verificationChecking that a certificate is legitimately signed all the way up to an issuer you trust.
- certificate authority (CA)A trusted party allowed to vouch for identities by signing digital certificates.