The CNAME record is indeed added right. It’s just added for the wrong domain name.
The issue is that you requested SSL certificates for great-site.net. But you cannot get an SSL certificate for great-site.net because great-site.net is not your domain, so you cannot complete the domain verification.
And when you do this, you’ll also see that you don’t need to setup CNAME records yourself, because the client area will identify that you are hosting this domain with us an offer to install the CNAME records for you.