ssl - strange certificate chain in website -
i'm new site encryption , looking expend knowledge certificates while surfing online , i've stumbled on this site
when looking on cert chain
looks legit :
but ... when capture ssl handshake
, 1 of certificates missing :
my question(s) : 1) how come browser sees cert chain depth 3 details while wireshark
doesn't ? 2) how legit the root issuer
not part of chain ??
i've tested using chrome
, explorer
what missing here ?
how come browser sees cert chain depth 3 details while wireshark doesn't ?
the browser shows trust path locally stored root ca, including root ca. wireshark showed certificates sent server. while leaf certificate same intermediate certificates (and root) might differ depending on certifaces trusted browser already.
how legit the root issuer not part of chain ??
the idea of certificate validation never trust peer, because peer might lying you. instead have local ca certificates (trusted root) , build trust chain these leaf certificate sent server. if trust chain can build browser believe server certificate trustable. means not legit server not send root certificate wrong if server includes root certificate in chain. should not harm though because browsers ignore useless certificate.
Comments
Post a Comment