While there, add one more test checking for whether the internal CA bundle we use can actually be loaded. Part of https://github.com/ooni/probe/issues/1591