[dns-operations] another cctls signed

[Viktor Dukhovni]

> On Apr 14, 2017, at 8:37 PM, Randy Bush <randy at psg.com> wrote:
> 
> randy, waiting for viktor to tell me what i did wrongly this time :)/2

I noticed .lr going signed earlier today.  The TLD looks fine, denial
of existence works correctly, and there are even some signed sub-domains,
with working DOE:

   http://dnsviz.net/d/_25._tcp.nationallotteries.gov.lr/dnssec/

There is, however, a noticeably high rate of lame delegations.
Examples:

	http://dnsviz.net/d/lec.gov.lr/dnssec/
	http://dnsviz.net/d/passportvisa.gov.lr/dnssec/
	http://dnsviz.net/d/speaker.gov.lr/dnssec/
	http://dnsviz.net/d/certs.org.lr/analyze/

These account for 118 out of 315 entries in the NSEC chain.

-- 
	Viktor.