retrieve-cert-chain script