Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 524

Appendix B. Introduction to Public-Key Cryptography
Figure B.9. Verifying a Certificate Chain to an Intermediate CA
Expired validity dates, an invalid signature, or the absence of a certificate for the issuing CA at any
Figure B.10, "A Certificate Chain That cannot
point in the certificate chain causes authentication to fail.
Be Verified"
shows how verification fails if neither the root CA certificate nor any of the intermediate CA
certificates are included in the verifier's local database.
502