Had something similar. Caused by the fact that my box had an IPv6 address but was not reachable over IPv6 due to a router configuration error. Lets Encrypt tries ipv6 first and due to some recent bug in their software they did not try ipv4 when ipv6 timed out. Making my box available over ipv6 (correcting the router config) solved it for me.