Let's Debug

Test result for be-safe.com using http-01

be-safe.com has an AAAA (IPv6) record (2001:41d0:305:2100::864d) but a test request to this address over port 80 did not succeed. Your web server must have at least one working IPv4 or IPv6 address. You should either ensure that validation requests to this domain succeed over IPv6, or remove its AAAA record.
A timeout was experienced while communicating with be-safe.com/2001:41d0:305:2100::864d: Get "http://be-safe.com/.well-known/acme-challenge/letsdebug-test": dial tcp [2001:41d0:305:2100::864d]:80: i/o timeout

Trace:
@0ms: Making a request to http://be-safe.com/.well-known/acme-challenge/letsdebug-test (using initial IP 2001:41d0:305:2100::864d)
@0ms: Dialing 2001:41d0:305:2100::864d
@10000ms: Experienced error: dial tcp [2001:41d0:305:2100::864d]:80: i/o timeout
A test authorization for be-safe.com to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
Fetching https://be-safe.com/.well-known/acme-challenge/ZmYlGcXksxii0I0pDcpaowk_TT45ccOdY7Vxzcg206U: Timeout during connect (likely firewall problem)
The current status as reported by the Let's Encrypt status page is Service Disruption as at 2021-04-13 04:20:03.409 +0000 UTC. Depending on the reported problem, this may affect certificate issuance. For more information, please visit the status page.
https://letsencrypt.status.io/
Debug
Requests made to the domain
Request to: be-safe.com/2001:41d0:305:2100::864d, Result: [Address=2001:41d0:305:2100::864d,Address Type=IPv6,Server=,HTTP Status=0], Issue: AAAANotWorking
Trace:
@0ms: Making a request to http://be-safe.com/.well-known/acme-challenge/letsdebug-test (using initial IP 2001:41d0:305:2100::864d)
@0ms: Dialing 2001:41d0:305:2100::864d
@10000ms: Experienced error: dial tcp [2001:41d0:305:2100::864d]:80: i/o timeout

Request to: be-safe.com/51.38.48.211, Result: [Address=51.38.48.211,Address Type=IPv4,Server=nginx,HTTP Status=301,Number of Redirects=1,Final HTTP Status=404], Issue:
Trace:
@0ms: Making a request to http://be-safe.com/.well-known/acme-challenge/letsdebug-test (using initial IP 51.38.48.211)
@0ms: Dialing 51.38.48.211
@143ms: Server response: HTTP 301 Moved Permanently
@143ms: Received redirect to https://be-safe.com/.well-known/acme-challenge/letsdebug-test
@143ms: Dialing 51.38.48.211
@434ms: Server response: HTTP 404 Not Found

Debug
A and AAAA records found for this domain
be-safe.com. 0 IN A 51.38.48.211
be-safe.com. 0 IN AAAA 2001:41d0:305:2100::864d
Challenge update failures for be-safe.com in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/31027045
acme: error code 400 "urn:ietf:params:acme:error:connection": Fetching https://be-safe.com/.well-known/acme-challenge/ZmYlGcXksxii0I0pDcpaowk_TT45ccOdY7Vxzcg206U: Timeout during connect (likely firewall problem)
Debug
The IANA public suffix is the TLD of the Registered Domain
The TLD for be-safe.com is: com
Debug
The current status.io status for Let's Encrypt
Service Disruption

Submitted Apr 13 13:01:01 2021. Sat in queue for 3ms. Completed in 26s. Hide verbose information.