diff --git a/docs/alternate_domains.rst b/docs/alternate_domains.rst
index 63f88b98d4c..1ff9ea7e6ae 100644
--- a/docs/alternate_domains.rst
+++ b/docs/alternate_domains.rst
@@ -46,6 +46,10 @@ By default, when you setup a custom domain to host documentation at Read the Doc
 we will attempt to provision a domain validated SSL certificate for the domain.
 This service is generously provided by Cloudflare.
 
+If your domain has configred CAA records, please do not forget to include
+Cloudflare CAA entries, see their `Certification Authority Authorization (CAA)
+FAQ <https://support.cloudflare.com/hc/en-us/articles/115000310832-Certification-Authority-Authorization-CAA-FAQ>`_.
+
 .. note::
 
     Some older setups configured a CNAME record pointing to ``readthedocs.org``
@@ -53,6 +57,8 @@ This service is generously provided by Cloudflare.
     they do not yet allow us to acquire SSL certificates for those domains.
     Simply point the CNAME to ``readthedocs.io``.
 
+    If you change the CNAME, the SSL certificate issuance can take about one hour.
+
 .. important::
 
     Due to a limitation, a domain cannot be proxied on Cloudflare