Hi, Sakit.
I believe this file should contain some valid certificate chain anyway, which should be provided by user (like, chain to some root CA existing in his/her internal network), is it? So it should be anyway created/filled by user before using the script.