Explain usage of complex certificate chain