Thanks, very helpful, though I think affected users are going to want to use this link instead:

http://blog.digicert.com/expired-intermediate-certificate/