diff --git a/dns/prx.org-hosted_zone.yml b/dns/prx.org-hosted_zone.yml
index 2e25d86fd..e3f53341c 100644
--- a/dns/prx.org-hosted_zone.yml
+++ b/dns/prx.org-hosted_zone.yml
@@ -696,42 +696,12 @@ Resources:
       Comment: AWS ACM validation records for prx-legacy in us-east-1
       HostedZoneId: !Ref HostedZone
       RecordSets:
-        # assets.feeder.prx.org
-        - Name: !Sub _b4dfcd47358bf506da3c3800733d4338.assets.feeder.${Domain}
-          ResourceRecords:
-            - _02342742bb7e9fe0c48977cb0dde2529.jdyyptrhmw.acm-validations.aws.
-          TTL: "3600"
-          Type: CNAME
-        # play.prx.org
-        - Name: !Sub _8d09676a833865f3cf06c51a75ead3e6.play.${Domain}
-          ResourceRecords:
-            - _0902f8141c71ef447fee9033925c4428.hkmpvcwbzw.acm-validations.aws.
-          TTL: "3600"
-          Type: CNAME
         # prx.org
         - Name: !Sub _81a7e2b5cf0c4f79d7188da0f03ae72d.${Domain}
           ResourceRecords:
             - _3be53bb29ca3174c2bf7d3af1ba8138d.ltfvzjuylp.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
-        # www.prx.org
-        - Name: !Sub _77f825fef8e66773824cae9664b30f4b.www.${Domain}
-          ResourceRecords:
-            - _02d6b548b20de21df506dda97d2d93cf.nhqijqilxf.acm-validations.aws.
-          TTL: "3600"
-          Type: CNAME
-        # *.dovetail.prx.org
-        - Name: !Sub _46bf7d39c705377e6ebc6cdbb68666f7.dovetail.${Domain}
-          ResourceRecords:
-            - _4cbdcf86962e70574094e66904a1f8c8.gmyctcqpsg.acm-validations.aws.
-          TTL: "3600"
-          Type: CNAME
-        # proxy.prx.org
-        - Name: !Sub _f3668666f8f3d4e418cd356d3b9a2b24.proxy.${Domain}
-          ResourceRecords:
-            - _2b3bfdcd1d1cc385a835e1817c9d85e9.nhqijqilxf.acm-validations.aws.
-          TTL: "3600"
-          Type: CNAME
         # assets.prx.org
         - Name: !Sub _32d33e14d4cd8184f3bc20cb3a7196f8.assets.${Domain}
           ResourceRecords:
@@ -750,11 +720,24 @@ Resources:
             - _dd8fc717a9e1812a20ca609d2673b50e.ltfvzjuylp.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
+        # assets.feeder.prx.org
+        - Name: !Sub _b4dfcd47358bf506da3c3800733d4338.assets.feeder.${Domain}
+          ResourceRecords:
+            - _02342742bb7e9fe0c48977cb0dde2529.jdyyptrhmw.acm-validations.aws.
+          TTL: "3600"
+          Type: CNAME
+        # beta.prx.org
         - Name: !Sub _13508a876b64465c58be4bfe738438d3.beta.${Domain}
           ResourceRecords:
             - _e829af98d504966c824f814e5235d3f8.ltfvzjuylp.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
+        # catapult.prx.org
+        - Name: !Sub _4ccd9d98904089a87493a6036ea14417.catapult.${Domain}
+          ResourceRecords:
+            - _4a6b0a1080a7224d7f854c4e1873415c.yyqgzzsvtj.acm-validations.aws.
+          TTL: "3600"
+          Type: CNAME
         # cdn.allusionist.prx.org
         - Name: !Sub _ed818192c01d69685019f0df4a93b99d.cdn.allusionist.${Domain}
           ResourceRecords:
@@ -779,46 +762,52 @@ Resources:
             - _6422d90655dea26fb64242eec0459ede.ltfvzjuylp.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
-        # media.prx.org
-        - Name: !Sub _a544dad876ab54f2e7cd244158b65ea7.media.${Domain}
+        # dovetail.prx.org
+        - Name: !Sub _46bf7d39c705377e6ebc6cdbb68666f7.dovetail.${Domain}
           ResourceRecords:
-            - _4ce52ca1a07e39ab0c68b5d2ac294210.ltfvzjuylp.acm-validations.aws.
+            - _4cbdcf86962e70574094e66904a1f8c8.gmyctcqpsg.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
-        # youthradioleaders.prx.org
-        - Name: !Sub _9784f5f1de33eb78c3db79157146f598.youthradioleaders.${Domain}
+        # feeder.prx.org
+        - Name: !Sub _16d5396a2320cf95e39991f091461469.feeder.${Domain}
           ResourceRecords:
-            - _78f937ab800800d5b4e66192d62246d9.auiqqraehs.acm-validations.aws.
+            - _22643ddfaf18052fb2db89f0e05cc559.zjfbrrwmzc.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
-        # staging.prx.org
-        - Name: !Sub _c734a125558ad81f4bddc3bf33a25a24.staging.${Domain}
+        # googlecp.prx.org
+        - Name: !Sub _46ef8beed364d392a2f9a1b78ca7cf38.googlecp.${Domain}
           ResourceRecords:
-            - _a8bee31e51e6de781121aed08bcbf4d1.hkmpvcwbzw.acm-validations.aws.
+            - _4dcc75601c7d647e3e8b5a87de7a5156.yyqgzzsvtj.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
-        # feeder.prx.org
-        - Name: !Sub _16d5396a2320cf95e39991f091461469.feeder.${Domain}
+        # media.prx.org
+        - Name: !Sub _a544dad876ab54f2e7cd244158b65ea7.media.${Domain}
           ResourceRecords:
-            - _22643ddfaf18052fb2db89f0e05cc559.zjfbrrwmzc.acm-validations.aws.
+            - _4ce52ca1a07e39ab0c68b5d2ac294210.ltfvzjuylp.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
-        # soundschool.prx.org
-        - Name: !Sub _87977a40d33f2a98b8d35cb66ae6db24.soundschool.${Domain}
+        # play.prx.org
+        - Name: !Sub _8d09676a833865f3cf06c51a75ead3e6.play.${Domain}
           ResourceRecords:
-            - _b18f79a775e90f2ada5ed28ace6f14a1.yyqgzzsvtj.acm-validations.aws.
+            - _0902f8141c71ef447fee9033925c4428.hkmpvcwbzw.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
-        # googlecp.prx.org
-        - Name: !Sub _46ef8beed364d392a2f9a1b78ca7cf38.googlecp.${Domain}
+        # proxy.prx.org
+        - Name: !Sub _f3668666f8f3d4e418cd356d3b9a2b24.proxy.${Domain}
           ResourceRecords:
-            - _4dcc75601c7d647e3e8b5a87de7a5156.yyqgzzsvtj.acm-validations.aws.
+            - _2b3bfdcd1d1cc385a835e1817c9d85e9.nhqijqilxf.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
-        # catapult.prx.org
-        - Name: !Sub _4ccd9d98904089a87493a6036ea14417.catapult.${Domain}
+        # soundschool.prx.org
+        - Name: !Sub _87977a40d33f2a98b8d35cb66ae6db24.soundschool.${Domain}
           ResourceRecords:
-            - _4a6b0a1080a7224d7f854c4e1873415c.yyqgzzsvtj.acm-validations.aws.
+            - _b18f79a775e90f2ada5ed28ace6f14a1.yyqgzzsvtj.acm-validations.aws.
+          TTL: "3600"
+          Type: CNAME
+        # staging.prx.org
+        - Name: !Sub _c734a125558ad81f4bddc3bf33a25a24.staging.${Domain}
+          ResourceRecords:
+            - _a8bee31e51e6de781121aed08bcbf4d1.hkmpvcwbzw.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
         # thecount.prx.org
@@ -827,6 +816,18 @@ Resources:
             - _3d4ab19090605e892a81fbcbe75021f3.bxmgrlxjqk.acm-validations.aws.
           TTL: "3600"
           Type: CNAME
+        # www.prx.org
+        - Name: !Sub _77f825fef8e66773824cae9664b30f4b.www.${Domain}
+          ResourceRecords:
+            - _02d6b548b20de21df506dda97d2d93cf.nhqijqilxf.acm-validations.aws.
+          TTL: "3600"
+          Type: CNAME
+        # youthradioleaders.prx.org
+        - Name: !Sub _9784f5f1de33eb78c3db79157146f598.youthradioleaders.${Domain}
+          ResourceRecords:
+            - _78f937ab800800d5b4e66192d62246d9.auiqqraehs.acm-validations.aws.
+          TTL: "3600"
+          Type: CNAME
   CampaignMonitor:
     Type: AWS::Route53::RecordSetGroup
     Properties: