Just for testing, may you put the following domains on the firewall white list
outbound1.letsencrypt.org and outbound2.letsencrypt.org
Delete your current certificates, and finally execute the script
/usr/share/ombutel/scripts/lets_encrypt
Let me know if you are able to re-generate your certificates without disabling the firewall.
