Fix NSEC chain validation.

Reported by:	Daniel Stirnimann