A simple test we usually use is to create a file named 1234 (with no extension) containing “5678” in the directory from where nginx serves the challenge file. If you can access that file from a browser on your phone (using your wireless service, not your own Wifi), typically the Let’s Encrypt authentication servers (one primary and three secondary) can too.