Home/ Questions/Q 8942253
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-15T11:28:19+00:00

I am trying a simple Java code to retrieve certificate chain for remote servers.

  • 0

I am trying a simple Java code to retrieve certificate chain for remote servers. Some websites return a chain of certificates (2,3,4..) and some just 1. My question is: Is there something wrong when I get certificate chain with length 1?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    There are three cases possible:

    1. They deliver a self-signed certificate
    2. They deliver a certificate signed by the root certificate (rare case) which you are assumed to have as trusted
    3. They deliver a certificate signed by CA certificate which they expect you to have (quite common case, as in Windows intermediate CA certificates are stored as well, so you can build a complete chain)

    Case 1 can be easily checked by you but such certificates are not trusted by default (unless the user has trusted them).
    In cases 2 and 3 you need to rebuild a chain using local certificate storage as a helper.

    • 0