You are using sni-01-challenge.
Do you know this:
Isn't it possible to switch to http-01 or dns-01 - challenge?