Yes correct.
So the different signing results when checked with isnotspam was confusing me.
Anyway , I re ran the test today and now it passes
–
----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: pass
ID(s) verified: header.From=discourse@example.com
Selector=x
domain=example.com
DomainKeys DNS Record=x._domainkey.example.com
Not sure what happened, but I did have to update my DNS txt key inside cloudflare, as well as update the rDNS for the mail server.
Maybe it just required time for everything to propagate or clear some cache?