$TTL 1h
$ORIGIN le-fay.org.uk.

@	SOA	hemlock.eden.le-fay.org. hostmaster.le-fay.org. (
		1	1h	5m	8w	3m
	;	serial	refresh	retry	expire	minimum
	)

	CAA	128 issue "letsencrypt.org;validationmethods=dns-01"

	NS	ns1.le-fay.org.
	NS	ns2.le-fay.org.
	NS	ns3.le-fay.org.