security.wporg has an invalid SSL certificate

http://security.wordpress.org is just a redirect to https://make.wordpress.org/core/handbook/testing/reporting-security-vulnerabilities/, but loading https://security.wordpress.org fails to redirect because of an invalid certificate.

#prio3