Certificate renewal is failing with DNS Challenge