im literally losing my mind here quick one, hopefully. After some server changes last week, the client's landing page shows NET::ERR_CERT_COMMON_NAME_INVALID:

Your connection is not private
Attackers might be trying to steal your information from portal.example.org
(for example, passwords, messages, or credit cards).
NET::ERR_CERT_DATE_INVALID
The certificate files on the server look recent, but the browser seems to see something else :/ Could it be serving teh wrong certificate? We use the hosts free SSL toggle and have a few sites on the same machine. How do i see what certificate is really being presented? Any commadns to check what the server actually presents would be great.