Your client will usually perform the same checks. Get the certificate, and check that it can trace it back to a known root certificate (possibly via one or more intermediate certificates, forming a "certificate chain").
This is the case with
curl for instance:
- you can specify the list of acceptable CA certs using the
- you can disable the check using
The list of acceptable root certificates may vary from one tool to another (it may also depend on the operating system). Some will use a system-wide list, while others will use their own list.
Some tools may not do the verification automatically (or at all), but you'll need to give us details of the specific tool if you want more details.