Context: We have a private certification authority in my company. We are provisioning VMs in our private cloud which will need to trust SSL certs issued by this CA, i.e. they will need the cert chain installed and trusted. Since provisioning is fully automated, we are committing the .pem of the cert chain (consisting of the Root and one intermediate cert) to a private Git repository. As always, even though the repo is private, the risk of exposure exists.
Question: If said certificate chain is inadvertently made public for any reason, does this expose us to any undue risk?
(I am fairly confident this is fine, but would like to check my sanity against this community, and am hoping the answer will help someone else in the future).