Let's Encrypts API recently changed from an RSA certificate to an ECDSA certificate, this results in your server having to communicate with a slightly different set of TLS Cipher Suites. Older versions of Windows or those upgraded in-place from older versions need additional configuration to enable the TLS Cipher Suites required.
Here is a related article for a different ACME tool: