serve a chain cert to fix Firefox SSL warnings