This worked like a charm!
However, I cannot get my iphone to trust it. I read this: Missing Intermediate Certificate Means SmartPhones Don’t Trust Site saying it might have a chain.pem missing. However I followed your steps so the chain must be on it, right? Besides when I try to add either fullchain or chain, it says it’s already there under some alias. Any ideas what I might be missing? Thanks!