Design update, address intermediates

This isn't showing the full intermediate data we have yet, but it starts off the visual refresh of results, and creates an extra state of `Almost`, where the user's client certificate is SHA-2 but they have an intermediate in the chain with SHA-1.

There are now 4 states:

![good](https://cloud.githubusercontent.com/assets/4592/4180656/b6b0e9ec-36ff-11e4-97eb-fef903e28005.png)

![almost](https://cloud.githubusercontent.com/assets/4592/4180658/b92c4054-36ff-11e4-8562-66275dd6c275.png)

![bad](https://cloud.githubusercontent.com/assets/4592/4180659/bb31f20e-36ff-11e4-8ca7-a3969efc0850.png)

![error](https://cloud.githubusercontent.com/assets/4592/4180660/bcffde98-36ff-11e4-89a1-5c566ca8ea50.png)

The `Bad` answer comes up only if the client cert is SHA-1, and doesn't mention intermediates, so it's possible someone fixes their client-cert and only goes from`Bad` to `Almost`. That's okay, and will be addressed when we show more intermediate details.

Next steps are to **show cert details** (including expiration date), and to **link to SSL Labs** for more detail.