They just have a domain validation cert. That doesn't mean much, other than your communication with the site is secure. And there's HTTP resources being pulled in invalidating most of that security. Bonus derp points for being a COMODO cert.