reason: unable to verify the first certificate (and UNABLE_TO_VERIFY_LEAF_SIGNATURE)