This should prevent endless certificate switching for Let's Encrypt cross-signed intermediate certificates.