Guido and Sean quickly found my mistake (thanks Guido and Sean). I did not use the full certificate chain. It works now.