ch to domainmail.ch: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (78.141.210.235, 78.141.216.94, 107.191.108.110, 107.191.109.110, 149.28.193.159, 149.28.213.249, 2001:19f0:5001:3233::ca, 2001:19f0:5001:3233::cb, 2001:19f0:ac01:1281::ba, 2001:19f0:ac01:1281::bb, 2604:180:2:29:212a::aa, 2604:180:2:29:212b::ab, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
ch to domainmail.ch: The DS RRset for the zone included algorithm 13 (ECDSAP256SHA256), but no DS RR matched a DNSKEY with algorithm 13 that signs the zone's DNSKEY RRset. (78.141.210.235, 78.141.216.94, 107.191.108.110, 107.191.109.110, 149.28.193.159, 149.28.213.249, 2001:19f0:5001:3233::ca, 2001:19f0:5001:3233::cb, 2001:19f0:ac01:1281::ba, 2001:19f0:ac01:1281::bb, 2604:180:2:29:212a::aa, 2604:180:2:29:212b::ab, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)