14.10.5 Verifying root certificates
Clients use root certificates to verify signatures in server certificates.
A client checks the expiration date of the imported root certificate to see if the certificate has expired. If the root certificate has expired, the client outputs a warning message to the integrated trace log, but uses the root certificate to verify the signature in the server certificate.
For details about renewing certificates, see 14.10.2(3) Maintaining certificates.
For details about the certificate contents to be verified, see the following subsections: