*         -> compromisedIntermediate (max intermediates: 0)
   *             -> attackerIntermediate (max intermediates: 0)
   *                 -> phonyVictim
   * ```
   */
  @Test
  fun intermediateMustNotHaveMoreIntermediatesThanSigner() {
    val attackerCa =
      HeldCertificate.Builder()
        .serialNumber(1L)
        .certificateAuthority(2)
        .commonName("attacker ca")
        .build()
    val pinnedRoot =