Make cert chain optional and apply across all vhosts