status checks: if a domain's DNS isnt working dont check the TLS certificate because we cant automatically provision one now anyway