It looks like the site is encrypted by "Let's Encrypt" a free SSL authority, basically you can get a free cert but it has limits (I think the limit is 3 months then it has to be renewed).

What it looks like they didn't do, is set up the auto redirect to force ssl

I wouldn't trust the site but it looks like they tried partially.