scenario AIA entity Root type Root entity CA1 type Intermediate issuer Root entity CA2 type Intermediate issuer CA1 aia CA1:Root entity User type EE issuer CA2 testdb User verify User:CA2 cert CA2:CA1 trust Root: result fail verify User:CA2 cert CA2:CA1 trust Root: fetch result pass