The ordered sequence linking an end-entity certificate through one or more intermediates up to a trusted root, each certificate signed by the next one up. Validation walks the chain checking signatures, validity dates, revocation status and constraints at every step. An incomplete chain — usually a missing intermediate — is one of the most common causes of TLS and 802.1X trust errors.