. to observer: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (64.96.1.1, 64.96.2.1, 185.159.197.3, 185.159.198.3, 2620:57:4001::1, 2620:10a:80aa::3, 2620:10a:80ab::3, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
observer/DNSKEY (alg 13, id 15964): The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (64.96.1.1, 64.96.2.1, 185.159.197.3, 185.159.198.3, 2620:57:4001::1, 2620:10a:80aa::3, 2620:10a:80ab::3, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
observer/DNSKEY (alg 13, id 3012): The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (64.96.1.1, 64.96.2.1, 185.159.197.3, 185.159.198.3, 2620:57:4001::1, 2620:10a:80aa::3, 2620:10a:80ab::3, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
observer/NS: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (64.96.1.1, 64.96.2.1, 185.159.197.3, 185.159.198.3, 2620:57:4001::1, 2620:10a:80aa::3, 2620:10a:80ab::3, UDP_-_EDNS0_4096_D_KN)
observer/NSEC3PARAM: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (64.96.1.1, 64.96.2.1, 185.159.197.3, 185.159.198.3, 2620:57:4001::1, 2620:10a:80aa::3, 2620:10a:80ab::3, UDP_-_EDNS0_4096_D_KN)
observer/SOA: The DS RRset for the zone included algorithm 8 (RSASHA256), but no RRSIG with algorithm 8 covering the RRset was returned in the response. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (64.96.1.1, 64.96.2.1, 185.159.197.3, 185.159.198.3, 2620:57:4001::1, 2620:10a:80aa::3, 2620:10a:80ab::3, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
observer/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
observer/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
zk39e148n0.observer/A has errors; select the "Denial of existence" DNSSEC option to see them.