intermediate CA

A certificate authority between the root and the site — the root CA signed it, and it signs site certificates. Clients do not know it, so the server sends it along with the site certificate.