TLS configuration with complete certificate chain