Please help with "Failed authorization procedure. duckdns.org (http-01)"

Maybe kimi4eg.duckdns.org and shunia.duckdns.org are your domains, but duckdns.org is not. That's controlled by the people who run DuckDNS. So you need to remove it from the list of domains on your server.

Maybe this can be done by setting ONLY_SUBDOMAINS=false to ONLY_SUBDOMAINS=true .

Is there a particular reason you are using port 90? Your current strategy isn't going to work unless you use port 80.