There are two different source files doing similar thing for certificate chain building on Windows: - [WinHttpCertificateHelper.cs](https://github.com/dotnet/runtime/blob/main/src/libraries/System.Net.Http.WinHttpHandler/src/System/Net/Http/WinHttpCertificateHelper.cs) - [CertificateValidation.Windows.cs](https://github.com/dotnet/runtime/blob/main/src/libraries/Common/src/System/Net/Security/CertificateValidation.Windows.cs) The `WinHttpHandler` should be replaced with the one from `SslStream` to unify the logic, remove duplicates and make the future maintenance simpler. cc @rzikm