SniCertificate::CertificateInvalidError: Unable to verify challenge for *


I’m getting this CertificateInvalidError error on HTTPS panel in Domain Management, so I can’t renew my Let’s Encrypt certificate. Because of it my site is currently inaccessible. I’m using AWS Route53 Service, and my nameserver register there is configured like this:

What am I doing wrong?

Thanks in advance.

seems like the renewal went through, it just maybe needed a little time: