They are probably using HSTS to keep users from accepting unsafe certs. https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security