What is the problem this feature will solve?

Third-party SaaS TLS proxies (e.g. ZScaler) will often be provided with an Intermediate CA certificate and not the organisation root CA certificate.

macOS supports Intermediate CA certificates and we should bring this to Windows as well.

See #56833 (comment)

What is the feature you are proposing to solve the problem?

I'm researching and looking for other implementations, so far I've verified locally that when I add:

• Root CA certificate to Trusted Root Certification Authorities
• Intermediate CA certificate to Intermediate Certification Authorities
  In the Certificates - Current Use store.

See Chromium source code: https://github.com/chromium/chromium/blob/98f89988c9774d0e138a0724aa64c46187203a77/net/cert/internal/trust_store_win.cc#L220-L222

Chrome works and I can access https://localhost:8443 from my test repository that was used for the macOS implementation: https://github.com/timja/openjdk-intermediate-ca-reproducer

What alternatives have you considered?

No response