be sent via the server - begin to see the RFC extract quoted previously mentioned) and if that's the circumstance, thinking about the Issuer and likely the AKI subject to confirm which Root CA issued this primary https://ca-none.com/