Add info about intermadiate CA

rapidssl is a good example of a CA that requires a chained crt