Invalid DNS record

[_az]

@franciscofabian

    detail: 'Incorrect TXT record "ph-fuQOgWCC9VeqXIVYnor-vfx1WzIcxG3jVNK3191o" found at _acme-challenge.auth.runningplanandtrack.com',
    status: 403
  },
  url: 'https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/2177871348/7gJ0fw',
  token: 'ph-fuQOgWCC9VeqXIVYnor-vfx1WzIcxG3jVNK3191o',

I think it will be helpful if you read over the DNS challenge part of RFC8555 again carefully.

token does not go directly into the DNS TXT record.

You take the token from the challenge, and then:

1. Derive the key authorization by concatenating it to your JWK thumbprint
2. Calculate the SHA-256 digest of the value from (1)
3. Encode the value from (2) using base64url

... then put that in the DNS TXT record.