Chain.pem with two entries - DST Root CA X3 deprecate

What message are they seeing exactly? And, can you describe what client (browser?) they are using and what version and oper sys it is on?

Yes, you generally understand it correctly. For more details about the long and short chain see:

3 Likes