No CAA record on dynamic.estada.ch (wildcard=false) contains the issuance domain "letsencrypt.org". You must either add an additional record to include "letsencrypt.org" or remove every existing CAA record. A list of the CAA records are provided in the details.
dynamic.estada.ch. 0 IN CAA 128 issue ";"
No valid A or AAAA records could be ultimately resolved for resolver-ip.dynamic.estada.ch. This means that Let's Encrypt would not be able to to connect to your domain to perform HTTP validation, since it would not know where to connect to.
No A or AAAA records found.