Summary
All CIP134 addresses included in certificate (x509/c509) should be witnessed
Description
The current implementation only validates whether the CIP134 URI stake address is witnessed. This only apply for Role0.
Task
All addresses (stake address or payment address) should get validated that they are witnessed. Also this validation should be done for all roles