~ nginx combine cert ~

cat ssl.domain.crt origin_ca_rsa_root.pem >> ssl.domain.nginx.crt

listen 443 ssl;
listen [::]:443;
ssl on;
ssl_certificate /etc/nginx/ssl/ssl.domain.nginx.crt;
ssl_certificate_key /etc/nginx/ssl/ssl.domain.key;