Add missing tests for certificate pinning

[titze]

The remaining tests according to the sections we defined in 0x05g need to be added

For example, here we can create another static test for the custom Trust Manager case. Does the app use this approach and if it does, is it correct? For example: uses a Trust Manager that does nothing and therefore trusts everything.

(Followup to #3035)