. to lb: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (77.72.229.254, 147.28.0.39, 193.188.128.14, 2001:418:1::39, 2a01:3f0:0:306::53, UDP_-_EDNS0_4096_D_K)
. to lb: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. (77.72.229.254, 147.28.0.39, 193.188.128.14, 2001:418:1::39, 2a01:3f0:0:306::53, UDP_-_EDNS0_4096_D_K)