As far as I can tell (ssllabs.com / ssldecoder.org) the certificate for www.sarahah.com has been revoked:
Serial C1:18:2F:1A:91:A9:0E:03 CRL - Revoked on CRL: http://crl.godaddy.com/gdig2s1-792.crl Revocation date: Mar 1 18:19:00 2018 GMT OCSP - REVOKED: http://ocsp.godaddy.com/ Revocation Time: Mar 1 18:19:00 2018 GMT Revocation Reason: cessationOfOperation
This shows as
SEC_ERROR_REVOKED_CERTIFICATE in Firefox 58.0.2, as it should.
However Chrome 64 seems to be perfectly happy with it! Any idea what's going on?
Obviously the hostname resolves to multiple IPs, but behaviour seems consistent in Firefox and Chrome with multiple refreshes.