title: Weird SSL common name mismatch
body: <p>Today I came across a weird case of cn mismatch. I have two domains:</p>
  
  <p>kpmg.talentsource.rs and 
  www.kpmg.talentsource.rs</p>
  
  <p>both have prod.q.ssl.global.fastly.net as their CNAME
  they have the same A records and certificates.</p>
  
  <p>Nevertheless:</p>
  
  <p><a href="https://kpmg.talentsource.rs" rel="nofollow noreferrer">https://kpmg.talentsource.rs</a> (OK)</p>
  
  <p><a href="https://www.kpmg.talentsource.rs" rel="nofollow noreferrer">https://www.kpmg.talentsource.rs</a> (CN mismatch)</p>
  
  <hr>
  
  <p><a href="https://www.ssllabs.com/ssltest/analyze.html?d=kpmg.talentsource.rs&amp;s=151.101.65.62" rel="nofollow noreferrer">https://www.ssllabs.com/ssltest/analyze.html?d=kpmg.talentsource.rs&amp;s=151.101.65.62</a>
  <a href="https://www.ssllabs.com/ssltest/analyze.html?d=www.kpmg.talentsource.rs&amp;s=151.101.65.62" rel="nofollow noreferrer">https://www.ssllabs.com/ssltest/analyze.html?d=www.kpmg.talentsource.rs&amp;s=151.101.65.62</a></p>
  
  <p>Note: none of the two has the kpmg.talentsource.rs in neither the the CN nor the SAN</p>
  
  <p>Any ideas why this is happening?</p>