Looks like it’s on SquareSpace, which does their own cert provisioning. Maybe the author just hasn’t set that up or has it misconfigured.