Thanks, it was due to an errant htaccess whitelist rule. I forgot to place the subdomain in it, so it got blocked.
