Facebook Capi error with cloudflare

i am conecting amazon cloud and meta via facebook capi and i am using the cloudflare for domain hosting, now it is asking me to create the DNS record after i provided the DNS token, but when i select to continue, it shows me this error " The domain or its parent domain has a CAA record that disallows certificate issuance. I am using a .org

Hi there,

Simply go to DNS > Records, press + Add record, select CAA as the type and add the record(s) you require:

Do note that some of your hostnames/subdomains are assigned to Shopify and therefore are inheriting Shopify settings.
You can check this with any online DNS checker tool (select CAA), or in your terminal.

dig CAA hostname.yourdomin.org

You’ll see something similar to this despite not having any CAA:

shops.myshopify.com. 1800 IN CAA 0 issue “digicert.com
shops.myshopify.com. 1800 IN CAA 0 issue “globalsign.com
shops.myshopify.com. 1800 IN CAA 0 issue “letsencrypt.org

Take care.