Certificate chain contains now 3 certificates when generated by Let's Encrypt, so we need to relax assertion.