2 ms·

Thanks! That's what I meant - 8.8.8.8 has a real cert, just not a valid one for its IP address (which does appear on other domains, oddly enough).