CAA SERVFAIL with tls-sni-01 for specific subdomain

Thanks @schoen, any help would be much appreciated!

I just saw a related thread: SERVFAIL looking up CAA, but I see NOERROR myself

Unfortunately, it seems to be unresolved and I’m not sure if I fully understand the mentioned diagnostics.