be sent with the server - see the RFC extract quoted higher than) and when that's the situation, taking a look at the Issuer and likely the AKI subject to ascertain which Root CA issued this primary intermediate CA https://ca-none.com/