Testsuite: regen TLSA records, to match cert tree