They said it should handle both
Maybe you need DNSSEC enabled on your domain?
I think I just enabled it
Worked!