The SSLFOR CA Matcher tests whether a supplied CA or intermediate certificate verifies the signature on a server certificate. It also checks the Basic Constraints extension so a certificate is not treated as a valid CA merely because a signature operation happens to succeed.
Use the tool when building a certificate chain, troubleshooting an intermediate CA file, or comparing several CA certificates with the same organization name.
For a complete ordered bundle, use the Certificate Chain Builder after identifying the correct intermediate certificates.