DNS challenge is in staging

Let’s Encrypt does authoritative lookups (i.e. starting from root servers). You can simulate that with dig example.com +trace. Maximum TTL is limited to a few minutes on their end.