o do so, i.e. the set of CAs that the client trusts as well as the DNS hostname for the server that this client is trying to connect to.</p>

<p>Note that it is common for certificates to be built up into a chain. For example a server&#39;s certificate may be signed by a key owned by a an intermediate CA. That intermediate CA also has a certificate containing its public key which is in turn signed by a key owned by a root CA. The client may only trust the root CA, but if the server sends both its own certif