Isn't the certificate "incorrect" only because Vodafone block the site and intercept the TLS connection? That's why the "incorrect" TLS cert presented mentions Vodafone's "solution" for traffic filtering. That's my read of things.