New Slack certs rejected by PaloAlto PanOS firewalls

[Bruce5051]

Also @griffin posted Long (default) and Short (alternate) Certificate Chains Explained