Intermediate certs allow anyone to mint web credentials for any Internet server.
To respect copyright, we link to the source rather than republishing the full text. Read the complete article on Ars Technica.