Add certificate chain support for capi

This commit moves the certificate chain support from the tpmkms to the
capi kms.

Author: maraino