Question about certificate inspection
Sorry guys I started with firewalls recently and I am doing the nse4 course but I am bit confused about this topic.
1:In deep inspection fortigate do this to validate te certificate : Verifies his revocation list, ca certificate possession,validade the dates and digital signature, is this correct ?
2- in ssl certificate inspection validades the same using the SNI that the clients sends in the TLS handshake ? fortigate will validate as well ""date,signature,etc" but using the SNI , is it correct ?
3-What is the certificate bundle ? for example I know that fortigate utlizes the Mozila Root CA list, the certificate bundle is this? is the root ca list ?
4-This one is more general question, why the same web site can have different certifica path in different web browsers ? for example i open a site that the intermediate ca was different in firefox and chrome, because if I understand the server will send his ca that is signed by a intermediate ca and this ca is signed by a root ca. But this website I had a different path in different web browsers.
Thank you in advance for any help
