for custom certs; chain file is the same as ssl file