No valid A or AAAA records could be ultimately resolved for nfe.penselaranja.com.br. This means that Let's Encrypt would not be able to connect to your domain to perform HTTP validation, since it would not know where to connect to.
No A or AAAA records found.