Added test for bad root cert