Lziest/aia bottom diver

1. Always follow AIA issuer to the root. 
2. When bundling, add intermediate certs to intermediate pool.

Plus a minor bug fix.