Extend Sub CA replication test
    
    Test more scenarios like replication replica -> master. Verify that master
    and replica have all expected certs with correct trust flags and all keys.
    
    See: https://pagure.io/freeipa/issue/7590
    See: https://pagure.io/freeipa/issue/7589
    Fixes: https://pagure.io/freeipa/issue/7611
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>