Hacker News Reader

Yep, but just remove the 's' from the protocol.

As you'd know if you'd tried it, it then redirects back to the https version - or at least FF & Chrome do, too late to actually check the headers.

Or install the cacert root certificate:

Do you trust CACert enough?

Moreso than some of the CAs that are trusted by default, yes.