Facebook also have that domain over SSL. CAB allow EV certificate to be issued for onion domains.

https://cabforum.org/2015/02/18/ballot-144-validation-rules-...