I was having the same problem. My domains are registered on cloudflare.com so my solution may be specific to their setup. The solution is I had to disable proxy status for CNAME(which was used for adding the sig1._domainkey) and It was accepted by cloud after that.