Re-ordered where NSEC3 goes in signing chapter