It would be better if you’d kept this in your other topic.
Rather than fuss with your own certs, the easy solution is to re-run ./discourse-setup and give it an email address for let’s encrypt and it’ll do all the work for you. If you want to do it the hard way, you’ll need to search here for the topic that describes how to do that and follow those instructions.