Through trial and error, I realised that both the cert and private key filenames that you upload, must end in .crt 🤷 Normally the key would be .key or at a push maybe .key.txt