Net::SSL does checking by trying to download https://.../ which won't work for www.clevelandorchestra.com, because it keeps redirecting to http://www.clevelandorchestra.com/. They do appear to have a valid certificate (check with SSL Certificate Check]). You might have better luck with OpenCA::OpenSSL or something like it.