Use dig/nslookup:
nslookup yourdomain.com
or online DNS checkers.
If the A record still shows an old IP, wait or lower TTL next time. SSL (Let's Encrypt) needs correct DNS first.