3.8.3.1 SPC Issuer Initialization

The client loads its Trusted SPC Issuer private key and Trusted SPC Issuer chain. These items SHOULD be preconfigured on the client and MUST be trusted by the server. The trustedSpcCAKeys field of the ServerState of the server MUST contain the public key of either the first or second certificate in the Trusted SPC Issuer chain in order for the chain to be trusted by the server.