Hello,
DeSEC auto genetate a CDS record using sha512, which cannot be deleted, when using mutiple dns providers, like combine desec with cloudflare, dnsviz will return error because CDS record cloudflare provide and desec provide are not consistant.
And usually one sha256 CDK record that match one dnskey is enough, it’s no need to add a sha512 one.

