Damn, OVH broke the TLS. I migrated it to my server and it's not properly served with a valid TLS. I'll let it run for a few days before publishing the details and insisting at their security contact point. Thanks