Well, the CA thinks that the client's request is missing one field.
Can you answer those questions?
If you're not using the latest version of Dehydrated, can you upgrade it?
It looks like there was at least one bug like this fixed some time ago:
Edit:
Let's Encrypt made this change today:
Maybe it somehow changed what HTTP version your client is negotiating with the server?