Presumably, this is a domain of a TLD which currently is sanctioned by Digicert - Embargoed Countries & Regions.
In that case, it’s a known issue that Cloudflare does not automatically switch to LE, and toggling usually fixes it. Sometimes, one has to switch manually → Reported as potential risk - blacklist_tld - #2 by sandro.