Issued certificate contains the full chain to the CA.
Changed self-signed CA creation function to CreateRootCa.
Demonstrate overriding DNS to match an expected server name in certificate.