Yeah, and http only :) It would be hilarious if it had invalid cert.