SSL/TLS Certificate - CAA records
Requests for Incommon/Sectigo certificates will be prevented from being issued if your domains/DNS have CAA records that do not include Sectigo or Incommon.
The CAA records for the Incommon/Sectigo service are published at: https://support.sectigo.com/PS_KnowledgeDetailPageFaq?Id=kA01N000000zFMO
You can use DNS lookup and various online tools to check for CAA: https://www.entrust.com/resources/certificate-solutions/tools/caa-lookup
DNS Requests? Network - DNS Registration FAQ