[youngtaff]

The intermediate cert should be requested from the server - might take a peak with wireshark if I've got time later.

I work for a security company so have zero expectations of privacy when I'm on the corporate network (which I was here) but I also see the same issue on both 3 and EE in the UK.

I don't generally see issues like this on the corporate network so there's something different about this case.

Of course Acxiom really should serve the site and intermediate certificates together to reduce round-trips and speed up the handshake.