a given name. Leave this field nil to let the library
select the first compatible chain from Certificates.