upd: for installation send certificate chains as p7 encoded cert set