Kind of off-topic, but why doesn't their site https://trailofbits.com/ have their certificate configured correctly? I know that their main site is https://www.trailofbits.com but I didn't expect their other record to be configured incorrectly.