Should definitely choose the Get automatic certificate from ACME Provider option. If you choose Let's Encrypt or ZeroSSL, thats entirely up to you. It was an added option in case one errors out for rate-limiting, you could then select the other and see if the other will succeed.