Intermediate certs allow anyone to mint web credentials for any Internet server.