Certificate structure:

Root CA
 |
 |-> Intermediate CA
      |
      |-> Server
      |
      |-> Client