To authorize Google Trust Services to issue certificates for your domain, add
the following CAA record to your DNS configuration:

    CAA 0 issue "pki.goog"