getting certchainfile to work