add pem certificate chain argument to https-client