While using certbot means we'll have both files retrieved, it's actually the fullchain.pem file that we use in nginx configuration. Using that one for the check makes more sense.
