March 2024 - Intermediate CA Update

Google Trust Services will be moving to new issuing intermediate CAs in the
near future.

TLS endpoint
   Old Issuer: GTS CA 1P5
   New Issuer: GTS CA WR1

SXG endpoint
   Old Issuer: GTS CA 2A1
   New Issuer: GTS CA AE1

In the future, we expect to move to multiple issuing intermediates per
certificate type and will rotate issuance across intermediate CAs. Pinning
to intermediate certificates is discouraged and will become increasingly
problematic in the future.