On September 8th, DNS CAA became a requirement for certificate authorities.

I found a handy tool to help you generate your CAA entry.

https://sslmate.com/caa/