ssl - strange certificate chain in website -


i'm new site encryption , looking expend knowledge certificates while surfing online , i've stumbled on this site

when looking on cert chain looks legit :

eset certificate chain web

but ... when capture ssl handshake , 1 of certificates missing : eset certificate chain wsh

my question(s) : 1) how come browser sees cert chain depth 3 details while wireshark doesn't ? 2) how legit the root issuer not part of chain ??

i've tested using chrome , explorer

what missing here ?

how come browser sees cert chain depth 3 details while wireshark doesn't ?

the browser shows trust path locally stored root ca, including root ca. wireshark showed certificates sent server. while leaf certificate same intermediate certificates (and root) might differ depending on certifaces trusted browser already.

how legit the root issuer not part of chain ??

the idea of certificate validation never trust peer, because peer might lying you. instead have local ca certificates (trusted root) , build trust chain these leaf certificate sent server. if trust chain can build browser believe server certificate trustable. means not legit server not send root certificate wrong if server includes root certificate in chain. should not harm though because browsers ignore useless certificate.


Comments

Popular posts from this blog

angular - Is it possible to get native element for formControl? -

unity3d - Rotate an object to face an opposite direction -

javascript - Why jQuery Select box change event is now working? -