It "works".
A "coming soon / landing page" with blah blah "Check back later."
It fails for HTTPS though (not my FW):
openssl s_client -connect 64.98.145.30:443
140191993213376:error:0200206F:system library:connect:Connection refused:../crypto/bio/b_sock2.c:110:
140191993213376:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111:
connect:errno=111
openssl s_client -connect 174.129.25.170:443
140291527385536:error:0200206E:system library:connect:Connection timed out:../crypto/bio/b_sock2.c:110:
140291527385536:error:2008A067:BIO routines:BIO_connect:connect error:../crypto/bio/b_sock2.c:111:
connect:errno=110
One with "Connection refused"
One with "Connection timed out"
The cert doesn't (yet) cover the apex:
A little DNS modification and another run at certbot can get that going.
OR can it?
Won't be able to CNAME the apex [that'll wreak havoc upon the interwebs - LOL].