The whole security concept of based is based on the internal CA and on signing and revoking those certificates. You break this functionality by switching to another certificate chain.