The point is, there's no point changing them until the site fixes their certificates.