Order of the certificate chain is: CERT - CACERT - CACERT_ROOT
# Verify your cert element (or part) from the command line: # (write EOLS to execute command) cat <<EOLS |openssl x509 -text -noout -in /dev/stdin | less