That is an unusual error. Do you limit access to your server by country or geography? Because Let's Encrypt recently started using more points around the world to validate from. Seeing "Seconday validation" in the error message means this might be happening to you.
People who previously only allowed USA (and their home countries) would no longer work.