Certificate chain authentication