Removing/correcting existing SOA record to allow Let's Encrypt to generate SSL CA

Note that I’ve not had a successful certificate creation, so I don’t have a Renew certificate button yet.