In the video I have shown to add just 4 domains, but It’s a good idea to add all the domain. Also enable “Trust NextDNS Root CA”

ppq.apple.com
ocsp.int-x3.letsencrypt.org
oscp.apple.com
oscp2.appe.com
certs.apple.com
crl.apple.com
crl3.digicert.com
crl.entrust.net
crl4.digicert.com
ocsp.apple.com
ocsp.digicert.cn
ocsp.digicert.com
ocsp.entrust.net
ocsp.usertrust.com
ocsp2.apple.com
valid.apple.com
ffapple.com
mesu.apple.com
world-gen.g.aaplimg.com
xp.apple.com
appldnld.apple.com
swscan.apple.com
pass.nekoo.apple
metrics.apple.com

Also make sure to check the box ” Trust NextDNS Root CA ”
— Watch the video for reference

ADD ALL THE DOMAIN IN NEXDNS