tigase: uses non-chained certs