proper cert var name
adding caChain fn