globalentry.gov has a valid certificate. The link you shared is for www.globalentry.gov. Presumably, the admins there shouldn't simply be pointing www.globalentry.gov at the same IP as globalentry.gov.