I made a little utility for quickly building PEM cert chains that I can pass to

osqueryd

while testing. https://github.com/groob/tclient For example.

tclient -server=<http://d7b1ac5c.ngrok.io:443|d7b1ac5c.ngrok.io:443> > server.crt