This has always puzzled me: I am working again at a company where there is a corporate certificate authority.
When browsing certain websites (e.g. this one) and looking at the certification path in the browser, I see the company's CA certificate at the top, then a second level certificate (is that the issuer?) also belonging to the company, and then the website in question.
Other sites, like e.g. a banking website do not have this and show some other third party CA and issuer which I would expect under normal circumstances.
So my question is this:
Does the presence of the company's CA / issuing authority certificates in the chain indicate that the company is able to access the data I receive and transmit via this website?
If so, how do they do that? Isn't all the data end-to-end encrypted?