A certificate hierarchy is the chain of trust that links a leaf certificate back to an intermediate CA and, ultimately, a trusted root CA. In TLS, this structure lets software verify that a server or client certificate was issued by an authority it trusts, rather than being self-signed or forged. The hierarchy also carries policy details such as key usage, validity periods, and whether a certificate may sign other certificates.
This matters in cyber security because defenders use the hierarchy to validate services, group related hosts, and spot suspicious reuse. A reused leaf certificate, an unexpected issuer, or a broken chain can reveal shared administration, cloned infrastructure, or a misconfigured deployment. Attackers may abuse stolen private keys or try to stand up fake services with certificates that do not validate cleanly. Defenders look for issuer consistency, chain completeness, expiration, and mismatches between a certificate and the service presenting it.