As Far as I am able to notify, the openssl confirm in the 1st case will Look at the chain and fall short, when the second only will Verify the chain in the signing-ca.crt to the foundation (not needing another certs, so just disregarding them) Refill on petfood pet supplies https://maps.app.goo.gl/9y4LfCmrsyYSbzTo6