also, since I was able to ping acme-v01.api.letsencrypt.org from the machine the web server and the letsencrypt.tcl script is running on, the message "network is unreachable" is actually false, so there's a bug in that code, or at least it's throwing one message meaning something else.