zlacker

It seems like your problem is that you're using a CNAME at the zone apex, which isn't valid. CNAMEs can't overlap with other records of the same name, and the zone apex holds other conflicting records (like SOA/MX).

It also looks like you've got some but not a complete DNSSEC config: https://dnssec-debugger.verisignlabs.com/taonexus.com

>>akerl_+(OP)
Thanks for that! I'll take a look at it when I get home.

I believe the DNSSEC thing was just part of proving ownership while I was getting my letsencrypt SSL certificate, I think I can remove the DNSSEC entry now, since I've installed the certificate and don't get any certificate errors now.