In order for us to be authorized to create an SSL certificate for your domain, please use the term "trust-provider.com" in your DNS settings. The entry should then look like this
domain.tld IN CAA issue "usertrust.com"
domain.tld IN CAA issuewild "usertrust.com"
For more information, see https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization