I've seen IMAP certificates changing back and forth, too. There's an explanation of this phenomenon that doesn't assume malice: there are N (> 1) servers with

I've seen IMAP certificates changing back and forth, too. There's an explanation of this phenomenon that doesn't assume malice: there are N (> 1) servers with different certificates, and you're not hitting the same one every time.