Hacker News Reader

How are the certs not expired? Is this connecting over HTTP or some other mechanism?

Considering the age, HTTP is likely.

Look carefully at the screenshot. It’s definitely HTTP.