Some DNS records were found that indicate TXT records may have been incorrectly manually entered into DNS editor interfaces. The correct way to enter these records is to either remove the domain from the label (so enter "_acme-challenge.www.example.org" as "_acme-challenge.www") or include a period (.) at the end of the label (enter "_acme-challenge.example.org.").
The following probably-erroneous TXT records were found:
_acme-challenge.kloon.work.gd.kloon.work.gd. 0 IN TXT "v=spf1 include:dnsexit.com -all"
_acme-challenge.kloon.work.gd.work.gd. 0 IN TXT "v=spf1 include:dnsexit.com -all"
Challenge update failures for kloon.work.gd in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/24578832894
acme: error code 403 "urn:ietf:params:acme:error:unauthorized": Incorrect TXT record "rOnGSELt-IEfvpJ63BtVyYw7jW--nqpk9XSwa0NneOo" (and 1 more) found at _acme-challenge.kloon.work.gd