Was there some documentation that told you that this is where those files should go? And you can use the openssl command to view the cert details and make sure they’re correct–run openssl x509 -in domain.crt -text -noout. What’s the output of that command?