Let's Encrypt can't generate a cert for a recently delegated TLD

Unless it's changed, SCT errors say that they're SCT errors. Or at least some of them do.