CAA probably makes sure that issued certificates come from my CA and not from another one.
Given in the DNS:
example.com. 300 IN CAA 0 issue "ca.example.com"
example.com. 300 IN CAA 0 issuewild "ca.example.com"
Question 1: Can my CA use it to issue the following sub-subdomains?
a.b.c.example.com
d.e.f.example.com
Question 2: If this is not possible, what is the easiest way to do this in DNS? We have many sub-subdomains.