'NGINX configuration for mTLS on the client side

When configuring mtls in NGINX, to verify upstream certificate, does upstream's TLS chain have to be stored in a cert which is used in proxy_ssl_trusted_certificate property? or just the Root CA certificate?

The server's TLS chain looks approximately like this:

0 - A cert for a company's domain, issued by Digicert Global CA G2

1 - Digicert Global CA G2, issued by Digicert Global Root G2



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source