Add note about StartSSL's intermediate certificate.