I agree with the author that the non-deterministic portion of it is mildly insane. Imagine a junior admin who installs a new certificate (without the intermedi

I agree with the author that the non-deterministic portion of it is mildly insane. Imagine a junior admin who installs a new certificate (without the intermediate). Tests on their Chrome which happens to have cached the intermediate, validate LGTM and moves on. Meanwhile it gets deployed and some portion of the site's users don't have the intermediate certificate cached = dungeon collapse.