Adding the CA certificate to an nginx vhost via ssl_client_certificate is outright wrong. Moreover, the CA certificate data is already written to the certificate file itself (class.DomainSSL.php:83-85). fixes #1650