You’re missing the intermediate CA certificate. The SSL labs report shows what cert you’re missing. Find it (Certum should have sent it to you with the end entity certificate) and paste it in the same file as the end entity certificate, immediately after it in the file. Restart nginx (or the whole container, if you’re feeling brutal) and everything should start working.