How to Add a CAA Record for Validation
Certum DV domain-level certificates may require CAA record validation
CAA
@
flag = 0
tag = issue
CA domain = certum.pl
Cloudflare is used as an example below

AWS reference
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html#CAAFormat