As @naox said, this is a requirement from IdenTrust, who cross-signed our intermediate so we could be immediately trusted in most browsers.
As @naox said, this is a requirement from IdenTrust, who cross-signed our intermediate so we could be immediately trusted in most browsers.