Update your CAA resource record to lock a domain
To lock a domain so only your CertCentral account members can get certificates for it:
Update the CAA resource record
Registrars have different methods to let you update CAA resource records.
These instructions present some of the settings required to enable locks. Note that you may need to contact your domain's registrar for registrar-specific information about how to access and edit DNS resource records.