The Plugin handled the TLS secret format wrong: it sent chain certificate instead of requested public certificate #2913