Let's Encrypt (usually) uses IPv6 if it's available (AAAA record present in DNS). Not sure why that's not happening here.