Fix/add correct intermediate chain for *.apache.org cert