A hybrid certificate chain is a transition model for public key infrastructure that combines classic and post-quantum trust elements. In practice, that can mean certificates, signatures, or validation paths that let an organization support both legacy and quantum-resistant cryptography during migration. RFC 9794 also distinguishes related approaches such as mixed, traditional, and parallel chains, because deployment choices affect how clients build trust.
This matters because certificate ecosystems are often harder to upgrade than the algorithms themselves. A hybrid chain can reduce compatibility risk and avoid a sudden cutover, but it also increases chain-building complexity, certificate size, policy coordination, and the chance of validation bugs. Defenders use hybrid chains to test TLS stacks, certificate authorities, and client software before full rollout. Attackers may try to exploit weak downgrade handling, broken interoperability, or misconfigured trust anchors when different chain types coexist.