Notes for ejabberd: no need to download the CA certificate since it's already included in fullchain.pem