Certificate Chains: Why Your Browser Trusts a Site

Trust is not declared, it is computed.