To ensure a proper HTTPS setup on your domain, our certificate provider requires you to add a CAA record to the domain. Not all DNS service providers support the CAA record type, so keep this in mind, but most providers will be allowing you to add the record type over time as Google continues to require websites to be secured on HTTPS.
The CAA record you need to add into your DNS manager is as follows:
Name (host): @
Value (points to): letsencrypt.org
TTL: 600 or 3600 (depending on what your domain registrar allows)
Note: After saving and adding a DNS record, DNS changes can take up to 24-48 hours to complete but are typically noticed sooner.