Add-on/SSL: explain how to split single cert file

It is possible that customers get only one file from their CA with both
the certificate and all intermediate certificates in it (the "nginx
option"). Add a not that this can happen and what to do then.

Also, make it clear that chain means intermediate certificates.