Sign Intermediate Certificate Authorities with the selected Root CA
Also give them CA properties.

Ticket: #6786