We've had some issues with letsencrypt caused by google timing out searching for CAA records.
This was caused by very strict rules on our DNS servers that have now been relaxed.
Hopefully, this will be the end of the issue.