I also had a persistent false CAA failure for mx2.slxh.nl (again). The failure disappeared after I requested the cert from another machine, after which requesting a cert from the original machine also worked.
Maybe rare failures are cached somehow?
Edit: same for a large set of other .slxh.nl domains: works from one host, not from another.