Let's Debug

Test result for bankofamerica.com using http-01

No CAA record on bankofamerica.com (wildcard=false) contains the issuance domain "letsencrypt.org". You must either add an additional record to include "letsencrypt.org" or remove every existing CAA record. A list of the CAA records are provided in the details.
bankofamerica.com. 0 IN CAA 0 issue "digicert.com"
bankofamerica.com. 0 IN CAA 0 issue "entrust.net"

Submitted Mar 31 16:24:23 2022. Sat in queue for 5ms. Completed in 3s. Show verbose information.