@MikeMcQ & @Bruce5051 and rg305
All thanks so much for your help, cert has become ready and true after I changed the DNS management for IPv6. Simple solution, but I have learned so much more from this topic.
Top!
Now I can go through switching to the production steps of letsEncrypt and try to get the app in the air.