How know the LE cert token for the TXT record?

The token is automatically managed by Netlify for sites using Netlify DNS. You might have an inactive DNS zone somewhere: [Support Guide] How to detect and fix inactive Netlify DNS zones