Hi @frumious 
,
I see your domain is hosted on Media Temple's DNS servers. It seems there are some issues with validation for domains hosted there - see:
I guess Media Temple may be rate-limiting DNS queries from Let's Encrypt validation authority resolvers (?).