www.kleos.ai has an AAAA (IPv6) record (2a01:7e01::f03c:91ff:fe08:e041) but a test request to this address over port 80 did not succeed. Let's Encrypt will prefer to use AAAA records, if present, and will not fall back to IPv4 records. You should either ensure that validation requests to this domain succeed over IPv6, or remove its AAAA record.
Get https://www.kleos.ai/.well-known/acme-challenge/letsdebug-test: read tcp [2600:3c03::f03c:91ff:fea2:6a56]:32888->[2a01:7e01::f03c:91ff:fe08:e041]:443: read: connection reset by peer
Trace:
@0ms: Making a request to http://www.kleos.ai/.well-known/acme-challenge/letsdebug-test (using initial IP 2a01:7e01::f03c:91ff:fe08:e041)
@0ms: Dialing 2a01:7e01::f03c:91ff:fe08:e041
@169ms: Server response: HTTP 301 Moved Permanently
@169ms: Received redirect to https://www.kleos.ai/.well-known/acme-challenge/letsdebug-test
@170ms: Dialing 2a01:7e01::f03c:91ff:fe08:e041
@338ms: Experienced error: read tcp [2600:3c03::f03c:91ff:fea2:6a56]:32888->[2a01:7e01::f03c:91ff:fe08:e041]:443: read: connection reset by peer
A test authorization for www.kleos.ai to the Let's Encrypt staging service has revealed issues that may prevent any certificate for this domain being issued.
Fetching https://www.kleos.ai/.well-known/acme-challenge/kjuqXITEjIzYFBSKY4QFvbrbjqvETeM8hyKYi3w40Lo: Connection reset by peer
An internal error occurred while checking the domain
Failed to query certwatch database to check rate limits: pq: unnamed prepared statement does not exist