Check the certs are up-to-date.
We can't default the domain to the host_name in staging: it breaks e.g. counter.staging.tc-dev.net.