Mandatory CAA (DNS) Checking

From 7th September 2017, all CAs are now required to check the domain name's DNS for a CAA record prior to issuing any SSL certificates for that domain.

If you have configured CAA records in your domain name's DNS, only the CAs listed may issue SSL certificates for your domain.
If you have no CAA records in your DNS, any CA can issue SSL certificates for your domain.