Letsencrypt doesn't verify dns-01 and leaves challenge in status: pending state

If we tell letsencrypt to do dns validation again then it does its job correctly. We do that manually for problematic cases.

We never saw any API error in these problematic cases.