ocf_ssl: flip order of bundle concatenation

nginx requires the cert to be first; this is probably the standard
anyway.