3 ms·

You should also publish CAA records, to whitelist exactly what providers are allowed to issue on behalf of your domain.