Seen by RIPE Atlas probes:
% blaeu-cert -c RU -r 100 www.powerdns.com
81 probes reported
[FAILED TO GET A CERT: connect: No route to host] : 1 occurrences
[FAILED TO GET A CERT: connect: timeout] : 2 occurrences
[<X509Name object '/CN=*.powerdns.com'>] : 78 occurrences
Test #19431704 done at 2019-02-07T10:47:59Z
Without the SNI, no difference: