Hi Joe,
That's great thank you. The IPv6 record must have been left over from the last 're-direct' and I only changed the A record. AAAA records cleaned up now so hopefully should be sorted shortly.
Thank you so much for your help, it's been doing my head in for the last couple of days!
Nick
And indeed - it now seems to have validated and installed a certificate! :-)
Joe