It's a cleartext http site.

No TLS. The link is bad.

It does offer TLS. The certificate just doesn't contain `www.catb.org` in its SAN. (But dozens of other host names.)