First I will wait for 24-48 hours, otherwise I will keep the DNS records Backup and remove those CAAs. Right?