Lighttpd: use ca file as ca cert, not chain