nostromo reports:
Replace SSL_CTX_use_certificate_file() with SSL_CTX_use_certificate_chain_file(), so that the full certificate chain can be verified.