They do force a redirect on http://becu.org/, but they can't really force a redirect on https://becu.org/, because you would need to accept the mismatched name before you could get the redirect.

Although, I'm surprised they don't have an alternate name, most of the CA's I've worked with recently automatically add the naked domain as an alternate name when you order a cert with www