Filemaker Server -- Certificate shows alert "can't verify the identity of [domain]'

Not using the intermediate certificate (chain.pem). Should we?
The two domain are indeed exactly the same. The first one, of course tags the FMS port :5003.