DNS-01 challenge for a private domain name : CAA validation error

[aarongable]

@brenard

The fact that I saw the server still attempting a CAA resolution on the higher-level names made me think that this might not be an issue.

Checking all parent domains' CAA records is very slow, so we dispatch lookups to all parent domains in parallel.