# Type of request: This is a ...
[X] bug report
[ ] feature request

# Detailed description
I try to configure SSL to work with a certificate bundle from my CA.
Here's an excerpt from my `docker-compose.yml` 


```
  localstack:
    image: localstack/localstack
    ports:
      - 4566:4566
      - "${PORT_WEB_UI-8080}:${PORT_WEB_UI-8080}"
    environment:
      - LOCALSTACK_SERVICES=s3,secretsmanager
      - LOCALSTACK_DEFAULT_REGION=us-east-1
      - LOCALSTACK_USE_SSL=true
      - LOCALSTACK_DATA_DIR=/tmp/localstack/data
      - LOCALSTACK_PORT_WEB_UI=8080
      - LOCALSTACK_HOSTNAME=aws.local.domain.com
    volumes:
      - "${TMPDIR:-/tmp/localstack}:/tmp/localstack"
      - ./support/docker/localstack/aws.local.domain.com.pem:/tmp/localstack/server.test.pem
      - ./support/docker/localstack/aws.local.domain.com.crt:/tmp/localstack/server.test.pem.crt
      - ./support/docker/localstack/aws.local.domain.com.key:/tmp/localstack/server.test.pem.key
```

My `.pem` file has the following format:


```
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
```

Here's what I see in `localstack` container logs when I run `docker-compose up`:


```
localstack | Waiting for all LocalStack services to be ready
localstack | Starting edge router (https port 4566)...
localstack | Starting mock S3 service in https ports 4566 (recommended) and 4572 (deprecated)...
localstack | 2020-05-31T16:22:20:INFO:localstack.utils.common: Unable to store key/cert files for custom SSL certificate: substring not found
localstack | 2020-05-31T16:22:20:INFO:localstack.multiserver: Starting multi API server process on port 34651
localstack | 2020-05-31T16:22:20:INFO:localstack.utils.common: Unable to store key/cert files for custom SSL certificate: substring not found
localstack | Starting mock Secrets Manager service in https ports 4566 (recommended) and 4584 (deprecated)...
localstack | 2020-05-31T16:22:21:INFO:localstack.utils.common: Unable to store key/cert files for custom SSL certificate: substring not found
localstack | Waiting for all LocalStack services to be ready
localstack | Ready.
```

I also have `aws.local.domain.com` in my `/etc/hosts` file pointing to `127.0.0.1`

...

## Expected behavior
I should be able to issue AWS CLI commands successfully. 
...

## Actual behavior
Here's the output from AWS CLI:


```
$ aws --endpoint-url=https://aws.local.domain.com:4566 s3 ls

SSL validation failed for https://aws.local.domain.com:4566/ [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1076)
```

...

Is there anything I'm missing?



┆Issue is synchronized with this [Jira Bug](https://localstack.atlassian.net/browse/LOC-192) by [Unito](https://www.unito.io/learn-more)

cleanup_tmp_files()
    cleanup_threads_and_processes(debug=debug)
def print_debug(msg, debug=False):
    if debug:
        print(msg)
@synchronized(lock=SSL_CERT_LOCK)
def generate_ssl_cert(target_file=None, overwrite=False, random=False, return_content=False, serial_number=None):
    
    
    from OpenSSL import crypto
    def all_exist(*files):
        return all([os.path.exists(f) for f in files])
    def store_cert_key_files(base_filename):
        key_file_name = '%s.key' % base_filename
        cert_file_name = '%s.crt' % base_filename
        
        
        content = load_file(target_file)
        key_start = '-----BEGIN PRIVATE KEY-----'
        key_end = '-----END PRIVATE KEY-----'
        rsa_key_start = '-----BEGIN RSA PRIVATE KEY-----'
        rsa_key_end = '-----END RSA PRIVATE KEY-----'
        cert_start = '-----BEGIN CERTIFICATE-----'
        cert_end = '-----END CERTIFICATE-----'
        if rsa_key_start in content:
            key_content = content[content.index(rsa_key_start): content.index(rsa_key_end) + len(rsa_key_end)]
        else:
            key_content = content[content.index(key_start): content.index(key_end) + len(key_end)]
        cert_content = content[content.index(cert_start): content.rindex(cert_end) + len(cert_end)]