Sorry, I mistyped, it's (all) 443.
It looks l like its not a firewalld issue though, as it turns out the service is only listening on IPv6 when it's started on boot.. so perhaps it's the service itself, or when systemd signals that the network is up that's the issue.
Thanks