No CAA record on oracle.com (wildcard=false) contains the issuance domain "letsencrypt.org". You must either add an additional record to include "letsencrypt.org" or remove every existing CAA record. A list of the CAA records are provided in the details.
oracle.com. 0 IN CAA 0 issue "symantec.com"
oracle.com. 0 IN CAA 0 issue "digicert.com"
An internal error occurred while checking the domain
Failed to query certwatch database to check rate limits: pq: canceling statement due to user request