heroku ssl endpoint + custom domain + dnsimple settings

The heroku docs are somewhat conflicting if you go through the steps to set up both a custom domain and their ssl endpoint add-on. For example, they don't tell you that you have to remove the A records to their three static IPs when switching over to SSL. Here are the DNS settings I've found to work using dnsimple's handy alias record:

ALIAS getclever.com <heroku ssl hostname>
CNAME www.getclever.com <heroku ssl hostname>

where <heroku ssl hostname> is something like tokyo-2121.herokussl.com. Note that there should be no A records at all!