org to letsencrypt.org: No NSEC RR(s) were returned to validate the NODATA response. See RFC 4035, Sec. 3.1.3.1, RFC 5155, Sec. 7.2.3, RFC 5155, Sec. 7.2.4. (64.6.64.6, 64.6.65.6, 2620:74:1b::1:1, 2620:74:1c::2:2, UDP_+_EDNS0_4096_D_K)
org to letsencrypt.org: The NODATA response did not include an SOA record. See RFC 1034, Sec. 4.3.4, RFC 2308, Sec. 2.2. (64.6.64.6, 64.6.65.6, 2620:74:1b::1:1, 2620:74:1c::2:2, UDP_+_EDNS0_4096_D_K)
516be49oky.letsencrypt.org/A has errors; select the "Denial of existence" DNSSEC option to see them.
letsencrypt.org/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
letsencrypt.org/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
letsencrypt.org/DS has errors; select the "Denial of existence" DNSSEC option to see them.