fix: self-signed leaf certificate is not self-issued

fix: self-signed leaf certificate is not self-issued #896