This looks related to https://github.com/letsencrypt/boulder/issues/1217 ( also discussed in this thread ) I’d suggest checking your domain name at https://crt.sh/ to check how many certs you have had issued ( to check you don’t hit the rate limits) - then test again if you are not close to the 5 certs / domain / 7 days limit