- Pull Consul Root CA from API in order to verify certificate chain - Assert on the DNSSAN as well to ensure it is correct