This did the trick. So it appears the CAA query could not get through via CNAME for some reason.
Dry run renewal on staging successful,
Live renewal successful!
Thanks @JuergenAuer and everyone here for your input 
Ah, happy to read that this "trick" has worked. Thanks for reporting back 
Normally, both versions should work.