Yes, this is classic symptom of the Palo Alto Networks firewall blocking the "ACME Protocol". I have dealt with numerous cases of this.
There is also a general topic on this by Seth Schoen (link here)
Just fyi, the initial test from Let's Debug has a similar user-agent as the actual LE servers which is why it also gets caught up in it.