Work around our not caching the intermediate CA...

net/base/ssl_client_socket_win.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/base/ssl_client_socket_win.h"
 
 #include <schnlsp.h>
 
 #include "base/lock.h"
 #include "base/singleton.h"
@@ skipping 341 matching lines @@
 void SSLClientSocketWin::GetSSLInfo(SSLInfo* ssl_info) {
   SECURITY_STATUS status = SEC_E_OK;
   if (server_cert_ == NULL) {
     status = QueryContextAttributes(&ctxt_,
                                     SECPKG_ATTR_REMOTE_CERT_CONTEXT,
                                     &server_cert_);
   }
   if (status == SEC_E_OK) {
     DCHECK(server_cert_);
     PCCERT_CONTEXT dup_cert = CertDuplicateCertificateContext(server_cert_);
-    ssl_info->cert = X509Certificate::CreateFromHandle(dup_cert);
+    ssl_info->cert = X509Certificate::CreateFromHandle(
+        dup_cert, X509Certificate::SOURCE_FROM_NETWORK);
   }
   SecPkgContext_ConnectionInfo connection_info;
   status = QueryContextAttributes(&ctxt_,
                                   SECPKG_ATTR_CONNECTION_INFO,
                                   &connection_info);
   if (status == SEC_E_OK) {
     // TODO(wtc): compute the overall security strength, taking into account
     // dwExchStrength and dwHashStrength.  dwExchStrength needs to be
     // normalized.
     ssl_info->security_bits = connection_info.dwCipherStrength;
@@ skipping 817 matching lines @@
   // compatible with WinHTTP, which doesn't report this error (bug 3004).
   server_cert_status_ &= ~CERT_STATUS_NO_REVOCATION_MECHANISM;
 
   if (IsCertStatusError(server_cert_status_))
     return MapCertStatusToNetError(server_cert_status_);
   return OK;
 }
 
 }  // namespace net