# Type of request: This is a ...
[X] bug report
[ ] feature request

# Detailed description
I try to configure SSL to work with a certificate bundle from my CA.
Here's an excerpt from my `docker-compose.yml` 


```
  localstack:
    image: localstack/localstack
    ports:
      - 4566:4566
      - "${PORT_WEB_UI-8080}:${PORT_WEB_UI-8080}"
    environment:
      - LOCALSTACK_SERVICES=s3,secretsmanager
      - LOCALSTACK_DEFAULT_REGION=us-east-1
      - LOCALSTACK_USE_SSL=true
      - LOCALSTACK_DATA_DIR=/tmp/localstack/data
      - LOCALSTACK_PORT_WEB_UI=8080
      - LOCALSTACK_HOSTNAME=aws.local.domain.com
    volumes:
      - "${TMPDIR:-/tmp/localstack}:/tmp/localstack"
      - ./support/docker/localstack/aws.local.domain.com.pem:/tmp/localstack/server.test.pem
      - ./support/docker/localstack/aws.local.domain.com.crt:/tmp/localstack/server.test.pem.crt
      - ./support/docker/localstack/aws.local.domain.com.key:/tmp/localstack/server.test.pem.key
```

My `.pem` file has the following format:


```
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
```

Here's what I see in `localstack` container logs when I run `docker-compose up`:


```
localstack | Waiting for all LocalStack services to be ready
localstack | Starting edge router (https port 4566)...
localstack | Starting mock S3 service in https ports 4566 (recommended) and 4572 (deprecated)...
localstack | 2020-05-31T16:22:20:INFO:localstack.utils.common: Unable to store key/cert files for custom SSL certificate: substring not found
localstack | 2020-05-31T16:22:20:INFO:localstack.multiserver: Starting multi API server process on port 34651
localstack | 2020-05-31T16:22:20:INFO:localstack.utils.common: Unable to store key/cert files for custom SSL certificate: substring not found
localstack | Starting mock Secrets Manager service in https ports 4566 (recommended) and 4584 (deprecated)...
localstack | 2020-05-31T16:22:21:INFO:localstack.utils.common: Unable to store key/cert files for custom SSL certificate: substring not found
localstack | Waiting for all LocalStack services to be ready
localstack | Ready.
```

I also have `aws.local.domain.com` in my `/etc/hosts` file pointing to `127.0.0.1`

...

## Expected behavior
I should be able to issue AWS CLI commands successfully. 
...

## Actual behavior
Here's the output from AWS CLI:


```
$ aws --endpoint-url=https://aws.local.domain.com:4566 s3 ls

SSL validation failed for https://aws.local.domain.com:4566/ [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1076)
```

...

Is there anything I'm missing?



┆Issue is synchronized with this [Jira Bug](https://localstack.atlassian.net/browse/LOC-192) by [Unito](https://www.unito.io/learn-more)

try:
                    if port == 53:
                        dnshost = '127.0.0.1' if host == 'localhost' else host
                        resolver = dns.resolver.Resolver()
                        resolver.nameservers = [dnshost]
                        resolver.timeout = 1
                        resolver.lifetime = 1
                        answers = resolver.query('google.com', 'A')
                        assert len(answers) > 0
                    else:
                        sock.sendto(bytes(), (host, port))
                        sock.recvfrom(1024)
                except Exception:
                    return False
            elif nw_protocol == socket.SOCK_STREAM:
                result = sock.connect_ex((host, port))
                if result != 0:
                    return False
    if 'tcp' not in protocols or not http_path:
        return True
    url = '%s://%s:%s%s' % (protocol, host, port, http_path)
    try:
        response = safe_requests.get(url, verify=False)
        return not expect_success or response.status_code < 400
    except Exception:
        return False
def wait_for_port_open(port, http_path=None, expect_success=True, retries=10, sleep_time=0.5):
    """ Ping the given network port until it becomes available (for a given number of retries).
        If 'http_path' is set, make a GET request to this path and assert a non-error response. """
    def check():