CAA Records are a newer type of DNS resource record type for name-value pairs that can carry a wide range of information to be used as part of the CA authorization process. It may also be possible for certificate evaluators to use CAA records to detect possible mis-issued certificates. However, the certificate evaluator should consider that the CAA records may have changed between the time the certificate was issued and the time the certificate is observed by the evaluator. For more information on CAA records please read https://tools.ietf.org/html/rfc6844 RFC 6844
An example of the CAA Record on the CloudfloorDNS platform.  When entering a CAA record type you should create the record based on the type of certificate you are obtaining.  Here we are obtaining a SSL Certificate for vpn.example.net using GEOTRUST as our CA.  Supplement the CA domain provider of your choice and relace the GEOTRUST domain name with your CA’s domain
For more information on CAA records and using them with GEOTrust and RapidSSL see the respective FAQ’s on their sites:
https://www.rapidssl.com/support/
https://www.geotrust.com/support/
To obtain a certificate at the root level you would keep name blank and add the record to your zone