I’m not sure quite what is going on with the process you are following. Assuming you are trying to install a certificate to Tomcat, it should not be necessary to play around with roots and intermediates at all.
I previously wrote a 2-3 step guide to deploy a Certbot certificate to Tomcat 8/9. If you like, take a look at it and see if suits what you’re doing.