Support for certificate chains