When I visit
https://somesite.org using Chrome or Firefox and inspect the server certificate, everything looks OK to me.
I see SSL Server Certificate, CN, O, OU that appears to match somesite.org issued by thawte SSL CA - G2.
But (and here I disclose that I'm new to this) using
openssl s_client -connect somesite.org:443 -showcerts
I get something very different:
depth=0 C = XX, ST = XXX, L = Strawberry Hills, O = Department of Misadventure and Zebras, OU = Somesite, CN = www.domz.gov verify error:num=20:unable to get local issuer certificate verify return:1
OU = Somesite is at odds with
Dept. of Misadventure and Zebras.
0 s:/C=XX/ST=XXX/L=Strawberry Hills/O=Department of Misadventure and Zebras/OU=Somesite/CN=www.domz.gov
i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
If I extract the certificate and process it with
openssl x509 -in abnote.pem -text
I get a result which confirms