HTTPS health checks pass on one hostname while the real route fails

An edge service returns healthy responses to probes on one host name, while customers still see TLS errors on another.