Which exit node injected a different cert? That should be reported.