I am using Bitdefender AV 2013 ed and I have noticed that when the Scan SSL is enabled in the configuration BD will use a local certificate, as mentioned here. This modifies the cert chain with BD as the trusted root on secured sites, or at least that's what you see. My questions are:
1) What is this kind of technology called?
2) What is actually taking place behind the scenes with cert validation?
3) Is BD masking the actual cert chain or does it actually substitute its own root for the site based on doing its own checks then tells the browser its "trusted"?
4) Is the presenting server involved in this process in any way or is it oblivious to what the client is doing?