@rain@hachyderm.io without seeing detailed network information it is not that easy to tell the root issues there. What is more confusing, that a different cert is being returned which means (too few information here), a different http/s host is hit, sni failed or routing.