Issue certificate signed only by ISRG for testing

Glad to see that this is working in Posh-ACME. I know it had caused some headaches elsewhere for the reason I stated above. :slightly_smiling_face:

It's a bit goofy that one can simply strip off the last "intermediate" certificate from the default chain in order to "build" the alternate chain.