The cert loaded on pizzahut.ca is for shortener.secureserver.net. The cert for www.pizzahut.ca is good for *.pizzahut.ca, but they're just not loading it for pizzahut.ca. :/