Hi,
I think this is because of Let's Encrypt's mutli-VA validation.
Let's Encrypt might found an old DNS query when attempting to validate your record (might be from a different server).
The best way to mitigate might be waiting longer before attempting to submit / validate order to give more time for DNS propergration.
Thank you