Solution 1:

You can verify the certificate/key pair manually using:

openssl x509 -noout -modulus -in subdomain_domain_com.crt | openssl md5
openssl rsa -noout -modulus -in server.key | openssl md5

The output of the two commands should be the same. This will tell you that it's a valid pair.

If it's valid, but you're getting that error, take a look at the section on "certificate chains" in nginx - configuring https servers. NGINX expects a chained cert to be in one file, with the intermediate concatenated after the server certificate. If you have them in the wrong order, that is the error you'll get.