Let's Encrypt CA has removed recently the contact email attribute from their API so without updating the LF server the certificate can't be renewed. This change has been reflected in the LF appliance since version 4.1.9. If you have installed older version please update optimally to the latest version. After then re-validate the certificate manually again in "Admin > System > Certificate" settings.