While I recognize the name of the domain, I'm getting some weird TLS cert warnings.

It's a cleartext http site.

No TLS. The link is bad.

It does offer TLS. The certificate just doesn't contain `www.catb.org` in its SAN. (But dozens of other host names.)