Comment by akdev1l

You can add the intermediate CA to your block list, presumably the distros will do this