roots are handled differently because they're their own CAs also adds test cases for each of: - a lone leaf - a lone intermediate - a lone root Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>