A user submitted a PR for this a while back but was missing a test. Seems pretty straightforward for us to add/support. https://github.com/mongodb/mongo-go-driver/pull/235/files

EDIT: Some consumers have hit a similar issue with intermediate CA certs. We think we can solve both issues by replacing all the relevant code with a single call to cfg.RootCAs.AppendCertsFromPEM.