cert chain looks ok to me as well