Maybe an intermediate certificate is missing?

Looking better. I'm not seeing the second intermediate certificate (ISRG Root X1) though, probably because of this:

It all depends upon which chain you want: