title: Does a TLS client needs to have intermediate CA in the trust store?
body: <p>When a TLS handshake takes place, the server sends in his ServerHello message, his digital certificate. This digital certificate is digitally signed by a intermediate CA named A and CA A also has a certificate which is signed by CA named root whose certificate is self signed, thus forming a certificate chain. The client then has to establish a trust, validating the server certificate. To perform that validation the client has to validate the entire chain correct?
  Must the client have in a truststore all the certificates (A and Root) or the client will download them?</p>