Google Trust Services will be moving to new issuing intermediate CAs in the
near future.
TLS endpoint
Old Issuer: GTS CA 1P5
New Issuer: GTS CA WR1
SXG endpoint
Old Issuer: GTS CA 2A1
New Issuer: GTS CA AE1
In the future, we expect to move to multiple issuing intermediates per
certificate type and will rotate issuance across intermediate CAs. Pinning
to intermediate certificates is discouraged and will become increasingly
problematic in the future.