My SSL cert chain is missing a subject
<p>I'm trying to set up LDAP authentication at a client (I'll call them Example, Inc.).  I've used <code>openssl s_client</code> to grab the certificate chain, but I'm still having issues.  When I verify the chain, I get this (ignoring hopefully irrevevant bits):</p>

<pre><code>Certificate chain
0 s:
  i:/C=US/DC=com/DC=example/DC=rl/DC=example/O=Example Inc./OU=EXAMPLE/CN=XMPL L3 Low Iss E4 CA
[...]
1 s:/C=US/DC=com/DC=example/DC=rl/DC=example/O=Example Inc./OU=EXAMPLE/CN=XMPL L3 Low Iss E4 CA
  i:/C=US/O=Example Inc./OU=EXAMPLE/CN=XMPL L3 INT Low CA
[...]
2 s:/C=US/O=Example Inc./OU=EXAMPLE/CN=XMPL L3 INT Low CA
  i:/C=US/O=Example Inc./OU=EXAMPLE/CN=Example L3 Root CA
[...]
</code></pre>

<p>On every web page that I've looked at where someone publishes a certificate chain, the first one (depth 0) has a subject (the s: line).  This doesn't.  Could that be the source of my problem?  </p>

<p>Persuant to @ChadSikorra's answer below, I used <code>openssl x509</code> to examine all three certificates and look for the word "critical".  I found it in the following places.</p>

<p>The first cert, with the blank subject, (XMPL L3 Low Iss E4 CA) says,</p>

<pre><code>X509v3 Basic Constraints: critical
    CA:TRUE, pathlen:0
</code></pre>

<p>The second one, with non-blank subject, (XMPL L3 INT Low CA) says,</p>

<pre><code>X509v3 Key Usage: critical
    Digital Signature, Key Encipherment
X509v3 Subject Alternative Name: critical
    DNS:host.example.rl.example.com, DNS:host, DNS:EXAMPLE, DNS:example.rl.example.com, DNS:ldap, DNS:ldap.example.com
</code></pre>

<p>The third cert (Example L3 Root CA) says,</p>

<pre><code>X509v3 Basic Constraints: critical
    CA:TRUE
</code></pre>