new error -- now setting certchain though