lower NSEC3 hashes