That was the clue.
Obtain the cross-certificate (the “bridge”) from the private CA owner and install it in the Intermediate Trust store. r2r root certificate is not installed
Priya logged into the Chicago server and ran certlm.msc (the local machine certificate store on Windows). Under , she found the expired R2R bridge certificate. Issuer: “Agency Private Root CA 2014.” Expiration: six days ago. That was the clue