@alexbloor MTU ones can be particularly fun though.
$this HTTPS site doesn't work (times out), other https sites on that server do. HTTP works.
Change the cert, suddenly it works - cert chain on original certificate was longer and something on the return path is using a smaller MTU