add test for configured ca_cert being added to default ca certs instead of replacing them