your bank story reminds me of an issue friends of mine ran into. their bank website has a section about security where they helpfully show the finger print of the tls key of the online banking website. except, it's wrong or outdated. so my friend called the bank, because the instructions even said so: if this key doesn't match, then do call the bank. he did, and promptly got his bank account locked, because obviously the problem must be on his end (his computer could be compromised), and not on the banks side. he had to walk into the local bank branch to resolve the issue in person.
