No CAA record on id-rsa.pub (wildcard=false) contains the issuance domain "letsencrypt.org". You must either add an additional record to include "letsencrypt.org" or remove every existing CAA record. A list of the CAA records are provided in the details.
id-rsa.pub. 0 IN CAA 0 issue "amazonaws.com"
CAA records control authorization for certificate authorities to issue certificates for a domain
id-rsa.pub. 0 IN CAA 0 issue "amazonaws.com"
id-rsa.pub. 0 IN CAA 0 issuewild ";"
A and AAAA records found for this domain
id-rsa.pub. 0 IN A 54.192.48.6
id-rsa.pub. 0 IN A 54.192.48.47
id-rsa.pub. 0 IN A 54.192.48.133
id-rsa.pub. 0 IN A 54.192.48.197
id-rsa.pub. 0 IN A 54.192.48.60
id-rsa.pub. 0 IN A 54.192.48.156
id-rsa.pub. 0 IN A 54.192.48.116
id-rsa.pub. 0 IN A 54.192.48.87
id-rsa.pub. 0 IN AAAA 2600:9000:201c:5e00:7:a0a8:780:93a1
id-rsa.pub. 0 IN AAAA 2600:9000:201c:8200:7:a0a8:780:93a1
id-rsa.pub. 0 IN AAAA 2600:9000:201c:9400:7:a0a8:780:93a1
id-rsa.pub. 0 IN AAAA 2600:9000:201c:4200:7:a0a8:780:93a1
id-rsa.pub. 0 IN AAAA 2600:9000:201c:4a00:7:a0a8:780:93a1
id-rsa.pub. 0 IN AAAA 2600:9000:201c:f800:7:a0a8:780:93a1
id-rsa.pub. 0 IN AAAA 2600:9000:201c:3400:7:a0a8:780:93a1
id-rsa.pub. 0 IN AAAA 2600:9000:201c:3c00:7:a0a8:780:93a1
The IANA public suffix is the TLD of the Registered Domain
The TLD for id-rsa.pub is: pub
The current status.io status for Let's Encrypt
Operational