The certificate for blog.torproject.org should not be self-signed. For me it is an extended validation certificate issued by DigiCert Inc.

I don’t think you should be seeing a self-signed certificate? I’m getting a valid Digicert-signed certificate on my end.

You're MitM'd yo.

It isn't a self-signed cert.