)
    assertThat(cleaner.clean(list(certB, certA, trusted, selfSigned), "hostname"))
      .isEqualTo(
        list(certB, certA, trusted, selfSigned),
      )
  }

  @Test
  fun trustedRootNotSelfSigned() {
    val unknownSigner =
      HeldCertificate
        .Builder()
        .serialNumber(1L)
        .certificateAuthority(2)
        .build()
    val trusted =
      HeldCertificate