Hetzner/Linode were MITMing their client(jabber.ru): https://notes.valdikss.org.ru/jabber.ru-mitm/
Was it Hetzner, or was it an attacker hosting on Hetzner/Linode?
Was it Hetzner, or was it an attacker hosting on Hetzner/Linode?