took me a bit, I thought it looks fine at first too
apparently the hash announced in the tlsa records is of the whole certificate, not of the pubkey in there (that should stay stable with key reuse over time, to not always needing to update the tlsa record)
(It was a topic many months ago already)
@Manoj if you show this to your mail person it will get fixed - DANE validation fails on e.email / murena.io (#8772) · Issues · e / Backlog · GitLab