Previously, the requirements of how intermediate certificates were
handled and their chain to root certificates was unclear.