This message was deleted.

I used this for my Lets encrypt cert: https://letsencrypt.org/docs/caa/

OK Thanks @Kasper Johansen Let me check

I have different DNS CAA configured (because i'm lazy and forgot to delete the ones i don't use anymore) but should give you an idea on how to do it with different cert providers Mine are: policy host: netscaler.dk issue: letsencrypt.org flags:0 issue: ; flags:0 issue: digicert.com flags:0 issuewild: sectigo.com flags:0

Where I am hosting the public fqdn there I have to create the host entry correct?

Yes, this is what I currently have at simply.com