using ssl pem certchainfile for server mode, private key can included in the chain file as well