The problem is that all certificates are already issued. No need to setup any CNAME records when your domain is already validated.
Note that Let’s Encrypt can reuse the CNAME record you setup previously. So when you renew a certificate and still have your old CNAME record in place, you can order the new certificate right away.
I also see you tried to order some Self Signed certificates. Those don’t need any CNAME records at all. We issue those ourselves, so we can basically skip all domain verification.