diff --git a/agent/consul/leader.go b/agent/consul/leader.go
index b9c91c9dc..bab926997 100644
--- a/agent/consul/leader.go
+++ b/agent/consul/leader.go
@@ -448,7 +448,9 @@ func (s *Server) initializeCA() error {
 		return err
 	}
 
-	// Check if the CA root is already initialized and exit if it is.
+	// Check if the CA root is already initialized and exit if it is,
+	// adding on any existing intermediate certs since they aren't directly
+	// tied to the provider.
 	// Every change to the CA after this initial bootstrapping should
 	// be done through the rotation process.
 	state := s.fsm.State()