How can we identify which root CA client used when there are multiple root CAs on the server?
We can compare the public keys of the client certificate and the root certificate but if we have many root certificates this is an unnecessary overhead.
Is there any way to find out from the client certificate (x.509) which root CA (alias) is used?
Edited to add this clarification:
if the intermediate certificates in the certificate chain are not available/accessible and if the same CA issued all the multiple root certificates(e.g. different tenants), is there any other approach to match the incoming client certificate to the corresponding root certificate on the server?