sm: Add special case for expired intermediate certificates.