That is not required to get SSL certificates from Letsencrypt. Is not made by DA automatically either.For example, did you set up a CAA record for the certificate issuer?
You are very sure you really still are the owner of the main domain .tld?Could not execute your request You do not own that domain