https://crt.sh/?Identity=cmake.org - a valid certificate has been issued in May, but maybe something wasn't restarted.