The DNS delegations for turriff.net aren't right; the .net nameservers think that the nameservers are at one IP but asking those nameservers give different IPs.
https://dnsviz.net/d/codex.turriff.net/servers/
You need a working domain name before you can get certificates for it.