Let's Encrypt validation status 400. Details: Unable to update challenge :: authorization must be pending

What does the log file say? (as @Dennis already asked)
I see in this post that you can find the log file at var/log/hestia/LE-user-domain-timestamp