And then promptly moved most things behind cloudflare, which is MITMing everything, undoing the benefit of HTTPS.
Remember "SSL added and removed here!"? Now it happens at cloudflare.