To ensure a proper HTTPS setup on your domain, our certificate provider requires you to add a CAA record to the domain if applicable. (Not all DNS service providers support the CAA record type.)
For DNS providers that allow it, the CAA record to add into your DNS manager is as follows:
Type: CAA
Name (host): @
Value (points to): letsencrypt.org
TTL: 600 or 3600 (depending on what your domain registrar allows)
Note: After saving and adding a DNS record, DNS changes can take up to 24-48 hours to completely take effect.