
According to https://sslmate.com/caa/about ; when the domain is a CNAME, it looks for these records on the target domain. Otherwise, we get bind errors about duplicate CNAME data, because a CNAME must be unique. Change-Id: Icdffe2e0b438e9e0f46fabb945902fd149759280