[throwaway613834]

So terminating in a root CA imposes more restrictions than terminating in a non-root CA here? Something about that seems off...

[tscs37]

Not root CA. Root store.

A root CA that has been installed by the computer administrator is assumed to be more trustworthy than the one installed by your OS.