Certificates

An unbalanced Merkle tree combines leaves A and B on the left and C on the right under a trusted root. B is the target; A and C are its ordered proof siblings in the fixed synthetic tree.

Certificate transparency makes issuance observable

Certificate Transparency makes public TLS certificate issuance observable. It does not determine whether a domain owner authorized an issuance, replace certificate-chain validation, or guarantee that every certificate everywhere is logged. A misissued certificate can have valid transparency evidence. The benefit is a public trail that monitors and affected owners can investigate. ...

The server sends the leaf and needed intermediates; the client builds a path to its own trust anchor and also checks hostname and validity.

A certificate chain is a path you should be able to print

Read the chain the edge actually presents, not just the leaf, before you trust the rollout.