I forgot to disable DNSSEC for my domain at my old registar before transferring to Cloudflare. The issue now being that the domain is not signed by DNSSEC but still has DS records in the .com zone.
As Cloudflare is the current registar, I cannot delete the DS records in the .com zone for the domain at the old registar and enabling/disabling DNSSEC through cloudflare.com doesn’t work either, it’s just stuck at “pending”. Also tried deleting DNSSEC through API.
My understanding is that Cloudflare manually has to delete the DS records.