diff --git a/checker/collect.go b/checker/collect.go
index 2b715fe..cc30469 100644
--- a/checker/collect.go
+++ b/checker/collect.go
@@ -193,11 +193,13 @@ func computeOwner(body serviceBody, prefix, parent string) (expected, recorded s
 		// Normalise: no double dots.
 		expected = strings.Replace(expected, "..", ".", -1)
 	}
+	// happyDomain encodes service-embedded record owners relative to the
+	// parent zone, so we must join with parent before treating as FQDN.
 	switch {
 	case body.OpenPGP != nil && body.OpenPGP.Hdr.Name != "":
-		recorded = dns.Fqdn(body.OpenPGP.Hdr.Name)
+		recorded = dns.Fqdn(sdk.JoinRelative(body.OpenPGP.Hdr.Name, parent))
 	case body.SMIMEA != nil && body.SMIMEA.Hdr.Name != "":
-		recorded = dns.Fqdn(body.SMIMEA.Hdr.Name)
+		recorded = dns.Fqdn(sdk.JoinRelative(body.SMIMEA.Hdr.Name, parent))
 	}
 	return
 }