TIL about CAA records:
https://sslmate.com/caa/