Any untrusted, expired, or revoked certificate in the certificate chain (includes root, lead certificate, and all intermediates), means the client will not trust the connected.