Just for testing, may you put the following domains on the firewall white list
outbound1.letsencrypt.org and outbound2.letsencrypt.org
Delete your current certificates, and finally execute the script
/usr/share/ombutel/scripts/lets_encrypt
Let me know if you are able to re-generate your certificates without disabling the firewall.
Firewal does not like Domains on Whitelist. My VitalPBX is not pingable anymore and not accessable. I will try to get it back runing with console.
