diff --git a/app/src/main/java/de/kuschku/quasseldroid/ssl/custom/QuasselCertificateManager.kt b/app/src/main/java/de/kuschku/quasseldroid/ssl/custom/QuasselCertificateManager.kt
index 418aa448df0a9a1ac5cf218564072d71cb522c3c..c64b240a5a9aba737e3c6e0024974558d7ed2ab8 100644
--- a/app/src/main/java/de/kuschku/quasseldroid/ssl/custom/QuasselCertificateManager.kt
+++ b/app/src/main/java/de/kuschku/quasseldroid/ssl/custom/QuasselCertificateManager.kt
@@ -30,7 +30,7 @@ class QuasselCertificateManager(
   fun isServerTrusted(chain: Array<out X509Certificate>?): Boolean {
     // Verify input conditions
     // If no certificate exists, this can’t be valid
-    val leafCertificate = chain?.lastOrNull() ?: return false
+    val leafCertificate = chain?.firstOrNull() ?: return false
     return isServerTrusted(leafCertificate)
   }