A fatal issue occurred during the DNS lookup process for duckdns.org/CAA.
DNS response for duckdns.org/CAA did not have an acceptable response code: SERVFAIL
Some DNS records were found that indicate TXT records may have been incorrectly manually entered into DNS editor interfaces. The correct way to enter these records is to either remove the domain from the label (so enter "_acme-challenge.www.example.org" as "_acme-challenge.www") or include a period (.) at the end of the label (enter "_acme-challenge.example.org.").
The following probably-erroneous TXT records were found:
_acme-challenge.jbd.duckdns.org.jbd.duckdns.org. 0 IN TXT "agYhh8MgKC5zJwBtVBRdaQ_72RbJtZnzTBazKThRk0Q"
An error occurred while attempting to lookup the TXT record on _acme-challenge.jbd.duckdns.org . Any resolver errors that the Let's Encrypt CA encounters on this record will cause certificate issuance to fail.
DNS response for _acme-challenge.jbd.duckdns.org/TXT did not have an acceptable response code: SERVFAIL