DNS problem: SERVFAIL looking up A for mysite - the domain's nameservers may be malfunctioning (renew cert)

Help
13

That's wrong, see your DNSVIZ result, see the result of "check-your-website".

The DS exists always in the parent zone. But there is no DNSKEY in the current zone with these two values:

DS with Algorithm 7, KeyTag 30894, DigestType 2 and Digest CqxjdlTZCfDWuAsIo83yTNwRln3QROkUCnJwJVp254U=

There must be a DNSKEY with the values the DS has.

That's how DNSSEC works.