Certificate chain support for sys::ssl

It would be helpful if sys::ssl could concatenate the certificate chain into the generated PEM file.

Order matters (cert 1st, followed by intermediate(s)) and the root certificate should not be included.

This is useful for services like nginx that cannot construct their certificate chain from the contents of /etc/ssl/certs like Apache does with SSLCACertificatePath