Let's Debug

Test result for v4v6fail.foo.monkas.xyz using http-01

v4v6fail.foo.monkas.xyz has both AAAA (IPv6) and A (IPv4) records. While they both appear to be accessible on the network, we have detected that they produce differing results when sent an ACME HTTP validation request. This may indicate that the IPv4 and IPv6 addresses may unintentionally point to different servers, which would cause validation to fail.
[Address Type=IPv4,Response Code=404,Server=] vs [Address Type=IPv6,Response Code=403,Server=CloudFront]

Submitted Apr 30 01:51:34 2018. Sat in queue for 3ms. Completed in 2s. Show verbose information.