Another bash one liner that saved my sanity.
While generating site wide certificates from LetsEncrypt you have to check if a certain TXT key was added to the DNS record (_acme-challenge).
Here is the magic line that returns only that for my domain “voina.fr”.
❯ dig -t txt _acme-challenge.voina.fr +short
"0I-_6OgecYmGIYnbRc2cbDtF0EvXfsSlDjVgFn91wdI"
So when waiting to see if the DNS TXT record was propagated so you can continue with the certificate challenge, just run the above line in a terminal.