Self-Signed certificate error?

[danbjoseph]

This is an advanced configuration option. Did you follow all the steps in the docs? https://docs.getodk.org/central-install-digital-ocean/#using-a-custom-ssl-certificate

I would also read through this thread and the threads it links:

Use easy-rsa to set up a self-signed certificate authority for Central

I have spent a whole day googling not to understand this: Generate appropriate fullchain.pem (-out) and privkey.pem (-keyout) files. Says the ODK Doc. Now I have ca.crt, ca.key, myform.key and myform.crt, and I know how to convert these to pem and concatenate private and public. But I am lost why I need fullchain.pem (contains private+public) and privkey.pem(private of what)?