- Fix that a signed wildcard NSEC, is checked before use,

so it does not allow insecure DS proofs inappropriately.
  Thanks to Qifan Zhang, Palo Alto Networks, for the report.