To quote this support guide:
The solution to your current issue is stated above.
As for DNSSEC support on Netlify