Add tests for non-ca trusted roots and intermediates