This should prevent endless certificate switching for Let's Encrypt cross-signed intermediate certificates.
This is used by Let's Encrypt to cross-sign.