ranggaAP
Let me remind you this:
fullchain.pem is a combination of your_domain.crt and SectigoRSADomainValidationSecureServerCA.crt.
For aaPanel to work, you can optionally choose your_domain.crt and its private key file.
It seems lack of information from your above description. you didn't provide private key of the certificate.