Did you end up having to combine your certs into one .pfx file and then using that in your .csdef file? e.g.
<Certificates>
<Certificate name="cert-fullchain" thumbprint="B50C067CEE2B0C3DF855AB2D92F4FE39D4E70F1E" thumbprintAlgorithm="sha1" />
</Certificates>