A test authorization for pma.sp.gov.br to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
DNS problem: query timed out looking up A for pma.sp.gov.br; DNS problem: query timed out looking up AAAA for pma.sp.gov.br