Switch to using pem for the cert chain