Order matters for ssl certs