While using certbot means we'll have both files retrieved, it's actually the fullchain.pem file that we use in nginx configuration. Using that one for the check makes more sense.
Slavi Pantaleev