Next they should fix their SSL certificate