We have SSL for *.sandbox.edx.org but not for *.*.sandbox.edx.org so things like studio.sandbox.edx.org don't serve the right SSL cert.
