Domain ssl certificate don't install and can’t be renewed

My sites: don’t install SSL more than 48 hours ago

and don’t renew SSL certificate too

In install case ( the status: " Waiting on DNS propagation" never complete (more then 48 hours)

In renew case (i have this site for 3 year or more) get this error:

SniCertificate::CertificateNonvalidError: Unable to verify challenge for DNS problem: SERVFAIL looking up CAA for - the domain’s nameservers may be malfunctioning

We’ve responded to your ticket in the helpdesk, feel free to follow-up there with any questions.