Does Sema Validate Certificate Chains or Only CT Log Inclusion?
Clarifying Sema’s Validation Scope Sema ingests Certificate Transparency (CT) logs and indexes DNS names from certificates for domain queries. The tool verifies log signatures and Merkle consistency, but it is unclear whether it performs full X.509 path validation against a trust store. Unresolved Design Decision The repository documentation notes that Sema