Excellent -- thanks for your quick reply! I see now in another thread (Palo Alto firewall users with failing HTTP-01 challenges: enable "acme-protocol") that this just started this past spring, which is right around when the problem surfaced. I'll contact our university IT department and hopefully get things cleared up.
Thanks again!