This means I can submit a pre-certificate issued directly from an accepted root. This MAY be omitted on submission, causing the following code to throw IndexOutOfBounds.
boolean isPreCertificate = CertificateInfo.isPreCertificate(certificatesChain.get(0));
if (isPreCertificate && CertificateInfo.isPreCertificateSigningCert(certificatesChain.get(1))) {
Preconditions.checkArgument(
certificatesChain.size() >= 3,
"When signing a PreCertificate with a PreCertificate Signing Cert,"
+ " the issuer certificate must follow.");
}