A real PoC against mercadopago.com.br to understand, step by step, how OpenSSL validates a domain’s certificate chain and what it actually means to trust a local trust anchor.