The domain for Let's Encrypt, letsencrypt.org, appears to have been dropped from the .org servers (whois is not showing it as expired). This is causing problems for things that try to check CRLs because the Let's Encrypt CRL servers don't resolve. -- Chris Adams <cma at cmadams.net>