As discussed privately, I am posting the results of my investigation here to help other users running into the same issue. What confused me, is that it complained about an IP identifier, which is odd, because we only allow DNS identifiers in the first place [1]. So where did the IP come from if...