removed cert_chain assumption