As NadirX mentioned in here we could create a certificate hierarchy test. Something that would test Root CA > CA > Certificates* configuration.