Adding a Certification Authority Authorization record to your domain settings tells the internet explicitly which security companies are allowed to issue SSL certificates for your website. Without this record, a compromised security vendor could theoretically issue a valid certificate for your business name to an unauthorized third party. Specifying approved certificate authorities in your DNS dashboard provides an easy, automated barrier against unauthorized traffic interception. Have you set up a CAA record in your domain settings to declare who can issue your security certificates?
Source: r/Network_Solutions · by /u/NetSol_Marissa