allCAs-verify-me.yandex.net and verify-me.yandex.net are signed by rootCA.pem.

See ./cert-gen/README for details.