Mainly to test TKM's ability for handling multiple CAs and that the received intermediate CA certificates are passed in the right order. But also added a regular scenario where two intermediate CA certificates are sent by one of the clients.
Extend the build-certs-chroot script is to fill in the public key fingerprint of the CA certificate in the appropriate strongswan.con files.