Your certificate chain might be to large for iPXE to handle, have a look at https://github.com/ipxe/ipxe/issues/407