TLSA record from RSA public key, see: https://github.com/agl/dnssec-tls-tools/blob/master/gentlsa.py