I think I just encountered this same error, since you referred to the privkey.pem instead of privkey1.pem. The files in /etc/letsencrypt/live/you.domain.com/ are actually symlinks to the real files, so if you try to load those, they won’t work. What you want are the files in /etc/letsencrypt/archive/your.domain.com/