After renewal, fullchain.pem only contains server certificate

The rpm command gives this output:

S.5....T.  c /etc/letsencrypt/cli.ini