Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We had this same issue. Turns out Go Daddy was generating our certificate with a SAN (www.server.domain.com) that wasn't in the csr. The csr was just generated with server.domain.com. So this was causing the mismatch. Go Daddy didn't want to help...