Let's Debug

Test result for sigla.sema.ma.gov.br using http-01

A fatal issue occurred during the DNS lookup process for sigla.sema.ma.gov.br/CAA.
DNS response for sigla.sema.ma.gov.br had fatal DNSSEC issues: validation failure <sigla.sema.ma.gov.br. CAA IN>: No DNSKEY record for key ma.gov.br. while building chain of trust
A fatal issue occurred during the DNS lookup process for sigla.sema.ma.gov.br/A.
DNS response for sigla.sema.ma.gov.br had fatal DNSSEC issues: validation failure <sigla.sema.ma.gov.br. A IN>: No DNSKEY record from 200.189.41.10 for key ma.gov.br. while building chain of trust
A fatal issue occurred during the DNS lookup process for sigla.sema.ma.gov.br/AAAA.
DNS response for sigla.sema.ma.gov.br had fatal DNSSEC issues: validation failure <sigla.sema.ma.gov.br. AAAA IN>: No DNSKEY record from 200.160.0.10 for key ma.gov.br. while building chain of trust
Fatal
No valid A or AAAA records could be ultimately resolved for sigla.sema.ma.gov.br. This means that Let's Encrypt would not be able to to connect to your domain to perform HTTP validation, since it would not know where to connect to.
No A or AAAA records found.
Warning
An internal error occurred while checking the domain
Failed to query certwatch database to check rate limits: dial tcp: i/o timeout

Submitted Dec 28 16:22:03 2018. Sat in queue for 3ms. Completed in 31m31s. Show verbose information.