Why does the SSL certificate chain has always at least 2 sub-CAs?

StackOverflow https://stackoverflow.com/questions/13052159

Question

I've noticed that in my browser the SSL certificate chain has always at least 2 sub-CAs. Is that always the case? If true, does someone know why?

Was it helpful?

Solution

There is often at least an intermediate CA, because it can make it easier to manage subsidiaries and to manage roll overs, but this is not a requirement.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top