I had to reach out directly to Shopify support. They reprovisioned the certificate and it went through immediately. The support rep recommended not having the CAA records in my DNS, despite finding that information on Shopify help.
Thank you - accepting your solution Stephen.