A private, inaccessible, IANA/IETF-reserved IP address was found for nxc-nachon.goip.de. Let's Encrypt will always fail HTTP validation for any domain that is pointing to an address that is not routable on the internet. You should either remove this address and replace it with a public one or use the DNS validation method instead.
100.109.25.170