Hi @corelux
if you have that problem ("secondary validation"): Letsencrypt has added a "multiple network validation".
Read
The Letsencrypt servers are able to check your CAA entry. The additional servers aren't, that's the error message.
May be a blocking DNS firewall.
deneme.aidat.pro
is your domain. CAA is a "tree climbing check". So if you have a CAA entry with deneme.aidat.pro, your aidat.pro entry isn't checked.
May be it helps if you create a CAA entry with deneme.aidat.pro.