use list to model certificate chain