Subdomain with A record on different server

[orangepizza]

Letsencrypt will always use ipv6 version first so if that can’t see file challenge will fail.