Hi,
A change has occurred regarding the CAA record requirements for Automatic provisioning of SSL certificates
If your domain does not use CAA records, no further action is required.
If you have any domains for Workspace 365 environments that use CAA records, verify that you use the CAA records listed below.
0 issue "digicert.com"
0 issue "pki.goog"
0 issue "letsencrypt.org"
If all three are present, no further actions are required
If the "letsencrypt.org" record is missing (which is most likely) make sure to add this