Let's Debug

Test result for de.store.asus.com using http-01

No CAA record on asus.com (wildcard=false) contains the issuance domain "letsencrypt.org". You must either add an additional record to include "letsencrypt.org" or remove every existing CAA record. A list of the CAA records are provided in the details.
asus.com. 0 IN CAA 0 issue "globalsign.com"

Submitted May 15 12:52:18 2018. Sat in queue for 4ms. Completed in 2s. Show verbose information.