May be some kind of edge cache that has it's own certs for sites it mirrors?

Either that or a lazy developer reusing the ssl cert instead of generating a new one.