CAA Record Checker control who issues.

CAA records restrict which certificate authorities may issue certificates for your domain. Check whether yours are set — a quick, high-value hardening step.