diff --git a/cacert.com b/cacert.com
index 490719c..2dfa4b8 100644
--- a/cacert.com
+++ b/cacert.com
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.com, under RCS control
-; @(#)(CAcert) $Id: cacert.com,v 1.23 2017/09/29 13:36:39 root Exp $
+; @(#)(CAcert) $Id: cacert.com,v 1.24 2018/05/02 12:48:09 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	1h	IN	SOA	ns1.cacert.com. hostmaster.cacert.com. (
-					2017092901	; Serial
+					2018050201	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					7d		; expire time
@@ -20,7 +20,7 @@ $TTL	12h	;	default TTL for zone data
 
 @		IN	CAA	0 issue "cacert.org"
 @		IN	CAA	0 issuewild "cacert.org"
-@		IN	CAA	0 iodef "critical-admin@cacert.org"
+@		IN	CAA	0 iodef "mailto:critical-admin@cacert.org"
 
 ns1		IN	A	213.154.225.251		; ns.cacert.org
 ns1		IN	AAAA	2001:7b8:616:0163::102
diff --git a/cacert.com.log b/cacert.com.log
index f4a4923..58c1652 100644
--- a/cacert.com.log
+++ b/cacert.com.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.com,v
 Working file: /var/opendnssec/unsigned/cacert.com
-head: 1.23
+head: 1.24
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 23;	selected revisions: 23
+total revisions: 24;	selected revisions: 24
 description:
 cacert.com - zone file for cacert.com
 ----------------------------
+revision 1.24
+date: 2018/05/02 12:48:09;  author: root;  state: Exp;  lines: +3 -3
+Update CAA record to contain a valid mailto: URL.
+----------------------------
 revision 1.23
 date: 2017/09/29 13:36:39;  author: root;  state: Exp;  lines: +6 -2
 Add CAA records.
diff --git a/cacert.net b/cacert.net
index ad44deb..c13227a 100644
--- a/cacert.net
+++ b/cacert.net
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.net, under RCS control
-; @(#)(CAcert) $Id: cacert.net,v 1.24 2017/09/29 13:36:39 root Exp $
+; @(#)(CAcert) $Id: cacert.net,v 1.25 2018/05/02 12:48:09 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	1h	IN	SOA	ns1.cacert.net. hostmaster.cacert.net. (
-					2017092901	; Serial
+					2018050201	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					7d		; expire time
@@ -20,7 +20,7 @@ $TTL	12h	;	default TTL for zone data
 
 @		IN	CAA	0 issue "cacert.org"
 @		IN	CAA	0 issuewild "cacert.org"
-@		IN	CAA	0 iodef "critical-admin@cacert.org"
+@		IN	CAA	0 iodef "mailto:critical-admin@cacert.org"
 
 ns1		IN	A	213.154.225.251		; ns.cacert.org
 ns1		IN	AAAA	2001:7b8:616:0163::102
diff --git a/cacert.net.log b/cacert.net.log
index 208c347..98f4e14 100644
--- a/cacert.net.log
+++ b/cacert.net.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.net,v
 Working file: /var/opendnssec/unsigned/cacert.net
-head: 1.24
+head: 1.25
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 24;	selected revisions: 24
+total revisions: 25;	selected revisions: 25
 description:
 cacert.net - DNS master zone file for cacert.net, under RCS control
 ----------------------------
+revision 1.25
+date: 2018/05/02 12:48:09;  author: root;  state: Exp;  lines: +3 -3
+Update CAA record to contain a valid mailto: URL.
+----------------------------
 revision 1.24
 date: 2017/09/29 13:36:39;  author: root;  state: Exp;  lines: +6 -2
 Add CAA records.
diff --git a/cacert.org b/cacert.org
index fd91d45..aacef65 100644
--- a/cacert.org
+++ b/cacert.org
@@ -1,10 +1,10 @@
 ; DNS master zone file for cacert.org, under RCS control
-; @(#)(CAcert) $Id: cacert.org,v 1.114 2018/04/16 06:34:32 root Exp $
+; @(#)(CAcert) $Id: cacert.org,v 1.115 2018/05/02 12:48:09 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
 @	1h	IN	SOA	ns1.cacert.org. hostmaster.cacert.org. (
-					2018041601	; Serial
+					2018050201	; Serial
 					4h		; refresh time
 					1h		; retry interval
 					7d		; expire time
@@ -23,7 +23,7 @@ $TTL	12h	;	default TTL for zone data
 
 @		IN	CAA	0 issue "cacert.org"
 @		IN	CAA	0 issuewild "cacert.org"
-@		IN	CAA	0 iodef "critical-admin@cacert.org"
+@		IN	CAA	0 iodef "mailto:critical-admin@cacert.org"
 
 blog		IN	A	213.154.225.234
 blog		IN	SSHFP	1 1 32ca6e4ba3275aab0d65f0f46969b11a4c4b36e8
diff --git a/cacert.org.log b/cacert.org.log
index d8bf5ff..84b66d1 100644
--- a/cacert.org.log
+++ b/cacert.org.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
 Working file: /var/opendnssec/unsigned/cacert.org
-head: 1.114
+head: 1.115
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 114;	selected revisions: 114
+total revisions: 115;	selected revisions: 115
 description:
 cacert.org - zone file for cacert.org
 ----------------------------
+revision 1.115
+date: 2018/05/02 12:48:09;  author: root;  state: Exp;  lines: +3 -3
+Update CAA record to contain a valid mailto: URL.
+----------------------------
 revision 1.114
 date: 2018/04/16 06:34:32;  author: root;  state: Exp;  lines: +3 -2
 Add IPv6 address for translations.cacert.org per e-mail request from Jan Dittberner on 15.04.2018.