#61 don't reverse certificate chain