If it's intentional, the only thing I can think of is access from corporate networks where SSL-intercepting proxies are absolutely common.