Heroku and Lets Encrypt

You’d probably need to use fullchain.pem (when using certbot) or the gethttpsforfree-equivalent (i.e., the certificate and intermediate concatenated in one file).