Some DNS records were found that indicate TXT records may have been incorrectly manually entered into DNS editor interfaces. The correct way to enter these records is to either remove the domain from the label (so enter "_acme-challenge.www.example.org" as "_acme-challenge.www") or include a period (.) at the end of the label (enter "_acme-challenge.example.org.").
The following probably-erroneous TXT records were found:
_acme-challenge.kloon.work.gd.kloon.work.gd. 0 IN TXT "v=spf1 include:dnsexit.com -all"
Challenge update failures for kloon.work.gd in order https://acme-staging-v02.api.letsencrypt.org/acme/order/5751349/24578977274
acme: error code 403 "urn:ietf:params:acme:error:unauthorized": Incorrect TXT record "WusG_i9bkYEu9iMUeA-_MUXzMdgeri73vRmqY1PI59k" (and 1 more) found at _acme-challenge.kloon.work.gd