Generally Request certificates are untrusted although not blocked. When one particular of such certificates is applied, You will be prompted to choose whether to have confidence in it. , as discussed in RFC 2469. Canonical variety is generally chosen, and used by all fashionable implementations.