Disabling DKIM as email/lists servers do not currently sign outgoing emails with DKIM. If they are ever updated with DKIM support in the future, please enable DKIM again. Perhaps, it'll be necessary to create new DKIM records, and not just enable the old.
cacert.org 43200 IN TXT "v=spf1 a mx a:emailout.cacert.org a:secure.cacert.org a:www1.cacert.org ip4:213.154.225.230 ip6:2001:7b8:616:162:1::10 ip6:2001:7b8:616:28:50::11 -all"
auto._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB"
mail._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
_adsp._domainkey.cacert.org 43200 IN TXT "dkim=unknown"
; Disabling DKIM as email server does not currently sign outgoing emails with DKIM
; auto._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDNFxiNr+NHJwih3OPhGr4iwLE+BBDu72YrMSzUnU1FF50CW7iOtuhg796UZ6xrZ5VuhAix6YmmzcvF2UxYzoD/XpfZ4MzBu0ND4/nkt9/YOTyIBzwQqn9uMNve0Y76Zsel89dIJtOI+y+lfnFExV0jKwe53gzmxMVpMSSCcZPGwIDAQAB"
; mail._domainkey.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOZV5h3rm18QRiNfNnwXadX8jeSC3zjpU7GFNTfZk1ifjLxrlVrSsfAvlVfFvR2/uQXegwEkiNV5bd57d989T+VVLZZbSv+OAXX4ZwihsLkf3huDszKtJTvsybqUNh97OE00THSyJCrcowFDcLv5IN2ULCOlMjTqbZxZuaNW0S6wIDAQAB"
; _adsp._domainkey.cacert.org 43200 IN TXT "dkim=unknown"
; certificate fingerprints
_certs.g1._fp.cacert.org 43200 IN TXT "root_X0F class3_2021"
cert.lists.cacert.org 43200 IN CNAME lists.cacert.org.
nocert.lists.cacert.org 43200 IN CNAME lists.cacert.org.
_adsp._domainkey.lists.cacert.org 43200 IN TXT "dkim=all"
lists._domainkey.lists.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
; Disabling DKIM as lists server does not currently sign outgoing emails with DKIM
; _adsp._domainkey.lists.cacert.org 43200 IN TXT "dkim=all"
; lists._domainkey.lists.cacert.org 43200 IN TXT "v=DKIM1;g=*;k=rsa;t=y;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCs2Hu5HQpT5FWj2TrqHZwFM/h0Tc35idlBviaArkdp5fRPx402ID+pMYZZW6lVM/IJlmeTqPGO73oQyl/tFlnXWj/X8p809IFqWnKWzGKJLhnxMAZW7bmzyjR8siK3It93+s5mu9r/4pwHCW3bEbdtKartd7cud84JO15cLJYA+QIDAQAB"
; internal MariaDB service
mariadb.cacert.org 43200 IN AAAA 2001:7b8:616:162:3::11
@ -333,9 +336,9 @@ ns1.cacert.org 43200 IN AAAA 2001:7b8:616:163::102
ns2.cacert.org 43200 IN A 213.154.225.237
ns2.cacert.org 43200 IN AAAA 2001:7b8:616:163::202
ns3.cacert.org 43200 IN A 46.249.47.169
ns3.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313
ns3.cacert.org 43200 IN AAAA 2a00:1ca8:2a::31
ns4.cacert.org 43200 IN A 45.77.40.159
ns4.cacert.org 43200 IN AAAA 2a00:1ca8:2a::31
ns4.cacert.org 43200 IN AAAA 2001:19f0:4400:407d::1313
ns5.cacert.org 43200 IN A 167.86.117.119
ns5.cacert.org 43200 IN AAAA 2a02:c207:3004:6195::1