Validation consitently fails for one subdomain

Can you provide the complete output? There are a number of ways validation can fail. The specific error the Let’s Encrypt API server returns would be very helpful in diagnosing the root cause.