By default, we configure the DNS CAA (Certification Authority Authorization) record in your DNS zone as follows:
0 issue "letsencrypt.org"
For technical background on CAA records, see DNS Certification Authority Authorization on Wikipedia .
You can customize your CAA records at any time using the Zone Editor inside your cPanel control panel.
If you use an additional commercial certificate authority, we recommend adding a second CAA record for that CA while keeping letsencrypt.org in place so automated Let’s Encrypt renewals (AutoSSL) continue to work seamlessly.