Fix the Certificate Chain (Recommended) You must ensure your web server provides the full chain (Leaf + Intermediate + Root). Concatenate Certificates: If you have a separate your_domain.crt and DigiCertCA.crt, you must combine them into a single file. Correct Order: Your Domain Certificate must come first, followed by the Intermediate(s).
cat navitrack_co_tz.key DigiCertCA.crt > navitrack_co_tz_fullchain.crt
Update Web Server(nginx) Configuration: