diff --git a/cacert.com b/cacert.com
index c3dea3f..a5b75d3 100644
--- a/cacert.com
+++ b/cacert.com
@@ -1,13 +1,13 @@
 ; DNS master zone file for cacert.com, under RCS control
-; @(#)(CAcert) $Id: cacert.com,v 1.21 2016/07/16 14:42:49 root Exp $
+; @(#)(CAcert) $Id: cacert.com,v 1.22 2016/10/12 07:18:06 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
-@	IN	SOA	ns1.cacert.com. hostmaster.cacert.com. (
-					2016071601	; Serial
+@	1h	IN	SOA	ns1.cacert.com. hostmaster.cacert.com. (
+					2016101201	; Serial
 					4h		; refresh time
 					1h		; retry interval
-					2d		; expire time
+					7d		; expire time
 					12h )		; negative caching TTL
 
 @		IN	NS	ns1.cacert.com.
diff --git a/cacert.com.log b/cacert.com.log
index 1f302cd..a0c06cf 100644
--- a/cacert.com.log
+++ b/cacert.com.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.com,v
 Working file: /var/opendnssec/unsigned/cacert.com
-head: 1.21
+head: 1.22
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 21;	selected revisions: 21
+total revisions: 22;	selected revisions: 22
 description:
 cacert.com - zone file for cacert.com
 ----------------------------
+revision 1.22
+date: 2016/10/12 07:18:06;  author: root;  state: Exp;  lines: +4 -4
+Set TTL for SOA to 1 hour, and SOA expire time to 7 days, per web recommendations.
+----------------------------
 revision 1.21
 date: 2016/07/16 14:42:49;  author: root;  state: Exp;  lines: +2 -2
 Update serial number to force OpenDNSSEC 2.0.0-1 to use a higher serial number.
diff --git a/cacert.net b/cacert.net
index fc943c1..dc10cd7 100644
--- a/cacert.net
+++ b/cacert.net
@@ -1,13 +1,13 @@
 ; DNS master zone file for cacert.net, under RCS control
-; @(#)(CAcert) $Id: cacert.net,v 1.22 2016/07/16 14:42:49 root Exp $
+; @(#)(CAcert) $Id: cacert.net,v 1.23 2016/10/12 07:18:06 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
-@	IN	SOA	ns1.cacert.net. hostmaster.cacert.net. (
-					2016071601	; Serial
+@	1h	IN	SOA	ns1.cacert.net. hostmaster.cacert.net. (
+					2016101201	; Serial
 					4h		; refresh time
 					1h		; retry interval
-					2d		; expire time
+					7d		; expire time
 					12h )		; negative caching TTL
 
 @		IN	NS	ns1.cacert.net.
diff --git a/cacert.net.log b/cacert.net.log
index 08c3ed8..f121f96 100644
--- a/cacert.net.log
+++ b/cacert.net.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.net,v
 Working file: /var/opendnssec/unsigned/cacert.net
-head: 1.22
+head: 1.23
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 22;	selected revisions: 22
+total revisions: 23;	selected revisions: 23
 description:
 cacert.net - DNS master zone file for cacert.net, under RCS control
 ----------------------------
+revision 1.23
+date: 2016/10/12 07:18:06;  author: root;  state: Exp;  lines: +4 -4
+Set TTL for SOA to 1 hour, and SOA expire time to 7 days, per web recommendations.
+----------------------------
 revision 1.22
 date: 2016/07/16 14:42:49;  author: root;  state: Exp;  lines: +2 -2
 Update serial number to force OpenDNSSEC 2.0.0-1 to use a higher serial number.
diff --git a/cacert.org b/cacert.org
index 5c328d6..659866c 100644
--- a/cacert.org
+++ b/cacert.org
@@ -1,13 +1,13 @@
 ; DNS master zone file for cacert.org, under RCS control
-; @(#)(CAcert) $Id: cacert.org,v 1.103 2016/08/03 10:44:12 root Exp $
+; @(#)(CAcert) $Id: cacert.org,v 1.104 2016/10/12 07:18:06 root Exp $
 
 $TTL	12h	;	default TTL for zone data
 
-@	IN	SOA	ns1.cacert.org. hostmaster.cacert.org. (
-					2016980301	; Serial
+@	1h	IN	SOA	ns1.cacert.org. hostmaster.cacert.org. (
+					2016101201	; Serial
 					4h		; refresh time
 					1h		; retry interval
-					2d		; expire time
+					7d		; expire time
 					12h )		; negative caching TTL
 
 @		IN	NS	ns1.cacert.org.
diff --git a/cacert.org.log b/cacert.org.log
index 23f92fc..2e62a6f 100644
--- a/cacert.org.log
+++ b/cacert.org.log
@@ -1,16 +1,20 @@
 
 RCS file: /var/opendnssec/unsigned/RCS/cacert.org,v
 Working file: /var/opendnssec/unsigned/cacert.org
-head: 1.103
+head: 1.104
 branch:
 locks: strict
 access list:
 symbolic names:
 keyword substitution: kv
-total revisions: 103;	selected revisions: 103
+total revisions: 104;	selected revisions: 104
 description:
 cacert.org - zone file for cacert.org
 ----------------------------
+revision 1.104
+date: 2016/10/12 07:18:06;  author: root;  state: Exp;  lines: +4 -4
+Set TTL for SOA to 1 hour, and SOA expire time to 7 days, per web recommendations.
+----------------------------
 revision 1.103
 date: 2016/08/03 10:44:12;  author: root;  state: Exp;  lines: +8 -8
 Update SSHFP records for hopper after migration to OpenSUSE 13.2.