dnssec - do timecheck from start