That seems likely. If you can't add StartSSL to your chain of trust, the same page can be accessed over HTTP instead of HTTPS.