How is decided if a certificate is valid in verificationMode: full mode

Elastic Stack Elasticsearch
1

Sorry if it is a simple question but, when i set verificationMode to full how is decided that certificate is valid or not? Which part of certificate is compared to what to check the certificate validation?

2

A verification mode of full uses

  1. PKIX (see RFC 5280) validation rules for certificate validity
  2. A HTTPS Server identity check (see RFC 2818; §3.1) for the hostname.

Explaining the full PKIX rules is a bit too complex to cover in details but it includes:

  • The signing chain
  • The validity dates
  • Extensions such as KeyUsage, if present.
3

Thanks for providing links.