Strange, GitHub Pages should support TLS on custom domains: https://blog.github.com/2018-05-01-github-pages-custom-domai...
Looks like the site is using a wrong IP for the A record. It is 192.30.252.153, but should be 185.199.108.153, where Let's Encrypt is enabled.