ACME cert generation failed - inconsistent dns

[raphaeltm]

Tried defang cert gen and ran into this:

➜  hasura git:(hasura-rds-example) ✗ COMPOSE_PROJECT_NAME=hasura-rds defang cert gen  
 # Using AWS provider
Triggering Let's Encrypt cert generation for hasura.hasura-rds-demo-1.goec.dev
Please setup CNAME record for hasura.hasura-rds-demo-1.goec.dev to point to ALB defang-hasura-rds-beta-alb-457580578.us-east-1.elb.amazonaws.com, waiting for CNAME record setup and DNS propagation
Note: DNS propagation may take a while, we will proceed as soon as the CNAME record is ready, checking...
hasura.hasura-rds-demo-1.goec.dev DNS is properly configured!
Triggering cert generation for hasura.hasura-rds-demo-1.goec.dev
Waiting for TLS cert to be online for hasura.hasura-rds-demo-1.goec.dev
Error waiting for TLS to be online: context deadline exceeded
Please check for error messages from `/aws/lambda/acme-lambda` log group in cloudwatch for more details