Hacker News Reader

This redirects to “https:/:one.one.one.one”, which is a domain name.

You mean a redirect to <https://one.one.one.one/>, but that's beside the point.

Can you or can't you get a certificate for an IP address to "do SSL" (TLS) that is trusted by major browsers?