HTTPS is not configured correctly, nor does it have a valid TLS cert, which is from 2010. And they are running Apache 2.2.3. Yikes!