using certchainfile in ssl server mode, certchainfile can have private key as well