Let's Debug

Test result for nonexistent12345.moonlit-rail.com using dns-01

A fatal issue occurred during the DNS lookup process for nonexistent12345.moonlit-rail.com/CAA.
DNS response for nonexistent12345.moonlit-rail.com had fatal DNSSEC issues: validation failure <nonexistent12345.moonlit-rail.com. CAA IN>: signature crypto failed from 209.6.248.230 for <M49CKM3J75CFS49VJ2PHVB4B1JMEIO48.moonlit-rail.com. NSEC3 IN>
An error occurred while attempting to lookup the TXT record on _acme-challenge.nonexistent12345.moonlit-rail.com . Any resolver errors that the Let's Encrypt CA encounters on this record will cause certificate issuance to fail.
DNS response for _acme-challenge.nonexistent12345.moonlit-rail.com had fatal DNSSEC issues: validation failure <_acme-challenge.nonexistent12345.moonlit-rail.com. TXT IN>: signature crypto failed from 88.218.94.169 for <M49CKM3J75CFS49VJ2PHVB4B1JMEIO48.moonlit-rail.com. NSEC3 IN>

Submitted Feb 17 05:27:22 2021. Sat in queue for 2ms. Completed in 1s. Show verbose information.