Re: Letsencrypt certificates

[reed]

I realize I didn't answer your question. You shouldn't need to do all 
SIG(0) style with KEY record. Ignore that. Use the "key" in named.conf 
with allow-update or update-policy.