Letsencrypt is going to revoke 3,048,289 certificates tomorrow that "may" have been wrongfully issued due to a wrong CAA DNS check.

To check if you're affected, and need to re-issue certs (before tomorrow!), check here:

https://letsencrypt.org/caaproblem/