Your DNS is mostly okay but not okay enough. 
The types of DNS queries those report sites try all work. Let's Encrypt also makes CAA queries, which fail.
There was recently another discussion about this problem with your DNS provider:
You'll need to contact Netregistry about fixing it, or switch to a different DNS host.