Ports 80 and 443 are all open. Domain was working fine until it expired and the system failed to auto-renew it. When I tried the steps here Renew ssl certificate, I discovered I already have the latest version of ODK and hence stuck on what to do next.