Impossible to renew certs if DNS used

What should I check?