Comment by baybal2

Why would not they run their own CA for short term certs?

Few CDNs have this exact problem and they sign their short term certs with their master cert.