Build certificate chains for S/MIME signatures