Check /var/log/ajenti.log and search here with any error messages you find.

You probably already figured this out, but ajenti wants a pem file containing the PRIVATE KEY (contents of privkey.pem in /etc/letsencrypt ) followed by the CERTIFICATE fullchain.