A certification hierarchy is a structured chain of Certification Authorities (CAs) that begins with a self-signed Root CA. The Root CA signs Intermediate CA certificates and Intermediate CA revocation lists (ARLs). At each level, one or more Intermediate CAs issue end-entity certificates and certificate revocation lists (CRLs). 

The PKI managed by ANF AC follows a vertical Certification Hierarchy in accordance with IETF RFC 4158, “Internet X.509 Public Key Infrastructure: Certification Path Building.” The Certification Path is built starting from the Root Certificate of the Certification Authority. 

As stated in its Certification Practice Statement, ANF Certification Authority manages the following Root CA and Intermediate CA certificates: