Leaf certificate

Also written: leaf, end-entity certificate

The certificate for an actual server or user, such as intranet.kettleandcrane.com, signed by an intermediate CA. It sits at the bottom of the chain.