No CAA record on moph.go.th (wildcard=false) contains the issuance domain "letsencrypt.org". You must either add an additional record to include "letsencrypt.org" or remove every existing CAA record. A list of the CAA records are provided in the details.
moph.go.th. 0 IN CAA 0 issue "sectigo.com"
moph.go.th. 0 IN CAA 0 issue "godaddy.com"
moph.go.th. 0 IN CAA 0 issue "globalsign.com"
moph.go.th. 0 IN CAA 0 issue "digicert.com"
CAA records control authorization for certificate authorities to issue certificates for a domain
moph.go.th. 0 IN CAA 0 issue "sectigo.com"
moph.go.th. 0 IN CAA 0 issue "godaddy.com"
moph.go.th. 0 IN CAA 0 issue "globalsign.com"
moph.go.th. 0 IN CAA 0 issue "digicert.com"
moph.go.th. 0 IN CAA 0 issuewild "sectigo.com"
moph.go.th. 0 IN CAA 0 issuewild "digicert.com"
moph.go.th. 0 IN CAA 0 issuewild "globalsign.com"
A and AAAA records found for this domain
nblp.moph.go.th. 0 IN A 209.15.96.241
The IANA public suffix is the TLD of the Registered Domain
The TLD for nblp.moph.go.th is: go.th
The current status.io status for Let's Encrypt
Operational