Properly make cert chain optional