Looks like your friend is serving a herokuapp.com certificate for his meetspaceapp.com domain. Should really get that fixed.