How do I add an SPF record? (Note that the SPF format has been deprecated due to the DNS RFC )

 How do I add an SPF record?

Sender Policy Frame (SPF) record specifies the list of approved hostnames (or IPs) from where email can originate for a particular domain.

To set up an SPF record:

1. Log into your Cloudflare Account. 
2. From the drop-down on the top left, select your domain.
3. Click the DNS app at the top of the page.
4. Under DNS Records, complete the fields for your TXT record, including your SPF values record (see image below). 
5. Choose TXT. Enter the Name of the record and its corresponding value.
   
6. (optional) Add your SPF format record string under the value section and click Add Record. Note that the SPF format has been deprecated due to the DNS RFC and thus, you should always have at least the TXT record definition present, even if you use the SPF type.

More information on SPF record syntax and formatting is found below.
The mechanisms can be prefixed with one of four qualifiers:

Prefix	Qualifier
+	Pass
-	Fail
~	Soft Fail
?	Neutral

Evaluation of an SPF record can return any of these results:

Pass	Explanation	Intended action
Pass	The SPF record designates the host to be allowed to send.	Accept
Fail	The SPF record has designated the host as NOT being allowed to send.	Reject
SoftFail	The SPF record has designated the host as NOT being allowed to send but is in transition.	Accept but mark
Neutral	The SPF record specifies explicitly that nothing can be said about the validity.	Accept
None	The domain does not have an SPF record or the SPF record does not evaluate to a result.	Accept
PermError	A permanent error has occurred (e.g. badly formatted SPF record).	Unspecified
TempError	A transient error has occurred.	Accept or reject

For more information about SPF Record Syntax, see, Open SPF project - syntax.
If you're unsure, double check what the value should be with your mail service provider.
Read more about Cloudflare's DNS services.

A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. (Exception from HRESULT: 0x800B0109)

 A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. (Exception from HRESULT: 0x800B0109)

Download the certificate https://drive.google.com/open?id=1NScf9KPru3GXyZtOfrxQkz2lirt25FGR

 

 To install a certificate chain

1. Click Start, and then click Run.
   
2. In the Open box, type mmc, and then click OK.
   
3. On the File menu, click Add/Remove Snap-in.
   
4. In the Add/Remove Snap-in dialog box, click Add.
   
5. In the list of Available Standalone Snap-ins, select Certificates.
   
6. Click Add.
   
7. Select Computer account, and then click Next.
   
8. In the Select Computer dialog box, ensure that Local computer (the computer this console is running on) is selected, and then click Finish.
   
9. Click Close, and then click OK.
   
10. In the left pane of the Certificates console, expand Certificates (Local Computer).
    
11. Expand Trusted Root Certification Authorities.
    
12. Right-click Certificates, point to All Tasks, and then click Import.
    
13. In the Import Wizard, click Next.
    
14. Click Browse, go to the location where you saved the certificate chain, select the .p7b file, and then click Open.
    
15. Click Next.
    
16. Accept the default value Place all certificates in the following store. Under Certificate store, ensure that Trusted Root Certification Authorities appears.
    
17. Click Next.
    
18. Click Finish.