> From: openssl-users On Behalf Of Kurt Roeckx > Sent: Tuesday, January 27, 2015 17:14 > On Tue, Jan 27, 2015 at 11:42:51PM +0300, Serj wrote: <snip> > What browsers do is cache the intermediate certificates. <snip> That's one possibility. Another is that it uses AuthorityInfoAccess to fetch the cert automatically, which OpenSSL currently does not (unless you figure out a custom X509_LOOKUP to do so).