Is your server sending the signature by an expired CA certificate (DSA)? If not, there is no problem (article author explained the fix). I followed his fix and

Is your server sending the signature by an expired CA certificate (DSA)? If not, there is no problem (article author explained the fix). I followed his fix and only after removing DSA from my certs Private DNS started working.