Sierra 10.12.5 + LetsEncrypt work-around: copy the cert to Desktop, drag into Keychain Access, get info, mark as “always trust”.
Updated my MacBook to Sierra 10.12.5 and my Let’s Encrypt SSL/TLS certificates stopped being accepted (ownCloud server, Contacts, Calendar).