Hmmm, we're using a Let's Encrypt Cert which is coming up as valid on Chrome, Firefox 71.0 and Safari for us. We have seen problems with OpenDNS - any chance you using that?