get a better test for missing intermediate certs