Am I missing something obvious?
Ouch, these different intermediate have same public key.
Sorry, feel stupid…
You should obtain the intermediate by using the link with the
up relation in the headers of the certificate response.
Ok. I’ll need to learn how to do it first.