Deckard fails consistently on sets/resolver/val_nsec3_cnametocnamewctoposwc.rpl
E.g. here.
It's not very readable, but Deckard does not seem to be expecting this NS record:
example.com. 3600 IN NS ns.example.com.
example.com. 3600 IN RRSIG NS 8 2 3600 20121126123249 20121029123249 64050 example.com. cpLjgKPacNxVIGo59tYMZ98GVYpH28WH RWj3AeIHK0StYFcAlflGLdkae1LEgMwf UmzrayrA5GMe3AH8LyuTgA2Dn1oNFxGf uShQvK2MFQ+LxvQfiuoqlAlL5Aa94IWc SoU/wLrr66I1K8oSB2yK1Tyyv73c2N40 D1mBbzIE70U=I'm not sure when this started happening.