code: func (c *ConsulProvider) ActiveIntermediate() (string, error) {
  	if c.isRoot {
  		return c.ActiveRoot()
  	}
  
  	_, providerState, err := c.getState()
  	if err != nil {
  		return "", err
  	}
  
  	return providerState.IntermediateCert, nil
  }
docs: // We aren't maintaining separate root/intermediate CAs for the builtin
  // provider, so just return the root.