The E1 intermediate signing certificate has this one in it:
Authority Information Access:
CA Issuers - URI:http://x2.i.lencr.org/
This URL points to the X2 cross-signed by X1 certificate. Even if the X2 is not in the trust store, some TLS stacks might still able to build a valid trust path without any cached certificate.