Hi,
On HestiaCP at /list/mail/ dns records there is a missing pre-record at “mail._domainkey” input.
That shlould be: “v=DKIM1;k=rsa;p=XXXXXX”.
Momently if you coppy these records to your domain DNS settings, the DKIM will be invalid without the pre-record.
Peter