Perhaps you have used tls-sni-01 validation, that's deprecated, support is stopped.
Remove your ipv6 (temporarily), then create a new certificate, then try to fix your ipv6.
You can test your configuration with the ipv6 address - and without having a dns entry. Use the ip and your domain name as additional hostname.