Change figure to resolve issue 7

Also, I would like to suggest to swap the NSEC3 records (2) and (3). I will send that in a separate pull request