Secondary SERVFAIL DNS error running certbot

# ip route show
default via 38.143.59.193 dev eth0 onlink
38.143.59.192/27 dev eth0 proto kernel scope link src 38.143.59.203
# netstat -rn
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
0.0.0.0         38.143.59.193   0.0.0.0         UG        0 0          0 eth0
38.143.59.192   0.0.0.0         255.255.255.224 U         0 0          0 eth0
# traceroute 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
 1  38.143.59.193 (38.143.59.193)  0.295 ms  0.453 ms  0.225 ms
 2  38.143.59.254 (38.143.59.254)  0.425 ms 198-98-100-13.beanfield.net (198.98.100.13)  0.990 ms  0.975 ms
 3  * po313.lsr02.800SquareVictoriaSt01.YUL.beanfield.com (199.167.154.181)  0.641 ms 198-98-100-13.beanfield.net (198.98.100.13)  0.959 ms
 4  * po313.lsr02.800SquareVictoriaSt01.YUL.beanfield.com (199.167.154.181)  0.659 ms  0.717 ms
 5  lo0-1.bdr01.1250ReneLevesqueBl01.YUL.beanfield.com (72.15.48.50)  5.837 ms  5.823 ms  5.810 ms
 6  lo0-1.bdr01.1250ReneLevesqueBl01.YUL.beanfield.com (72.15.48.50)  5.797 ms  5.487 ms 66-207-192-242.beanfield.net (66.207.192.242)  0.478 ms
 7  192.178.86.251 (192.178.86.251)  0.815 ms 142.251.51.179 (142.251.51.179)  0.760 ms 192.178.86.87 (192.178.86.87)  2.412 ms
 8  142.250.58.131 (142.250.58.131)  1.352 ms 172.253.77.117 (172.253.77.117)  1.514 ms 142.250.238.147 (142.250.238.147)  1.506 ms
 9  dns.google (8.8.8.8)  0.708 ms  0.697 ms 142.250.237.11 (142.250.237.11)  1.479 ms