fix NSEC for asterisk ents and add test