No valid A or AAAA records could be ultimately resolved for network-fail.foo.monkas.xyz. This means that Let's Encrypt would not be able to connect to your domain to perform HTTP validation, since it would not know where to connect to.
No A or AAAA records found.
The IANA public suffix is the TLD of the Registered Domain
The TLD for network-fail.foo.monkas.xyz is: xyz
1 Certificates contributing to rate limits for this domain
Serial: 313335072542191740463779136373080116128721
NotBefore: 2023-03-29 20:46:10 +0000 UTC
Names: [*.alias.foo.monkas.xyz *.foo.monkas.xyz foo.monkas.xyz]