ranggaAP
Let me remind you this:
fullchain.pem
is a combination of your_domain.crt
and SectigoRSADomainValidationSecureServerCA.crt
.
For aaPanel to work, you can optionally choose your_domain.crt
and its private key file.
It seems lack of information from your above description. you didn't provide private key of the certificate.