Which files to point AdGuardhome to for DNS over tls

[echinida]

I would like to use DNS over tls for adguard home. I have used acme to generate a certificate and the /conf/acme directory contents are
-rw-r--r-- 1 root wheel 5290 Dec 5 17:49 newkey.all.pem
-rw-r--r-- 1 root wheel 1826 Dec 5 17:49 newkey.ca
-rw-r--r-- 1 root wheel 1789 Dec 5 17:49 newkey.crt
-rw-r--r-- 1 root wheel 3615 Dec 5 17:49 newkey.fullchain
-rw-r--r-- 1 root wheel 1675 Dec 5 17:49 newkey.key

AdGuard wants a certificate chain and a private key file.
Is the .pem file the correct certificate chain file? I assume the .key file is the private key?
Are my assumptions correct?