SSLCA: fixed appending chain certs
bcfg2-profile-templates.py: various improvements