OpenSSL: Use connection certificate chain with PKCS#12 extra certs