ssl cert: add chain for ports