portal/cert: clarify intermediate cert requests