If the system's ca_chain is not sufficient, remember to use the bundled