The contents of your PEM file might be in the wrong order. I've been struggling with this also this morning on a raspberry pi. The documentation isn't very explicit about 'fullchain', but the contents should be as follows: -----BEGIN PRIVATE KEY----- private key -----END PRIVATE KEY----- -----BEGIN ...