Clarify ordering of certificates when using certificate chains