Work around about AWS in second validation fail

dns-01 can be tricky, even if you have full control of your DNS