However, since tobaccoreviews has become a favorite whipping boy on this site, you'll find no end of people piling on with how bad it is. It is exempt from rule 12 so far.
Their SSL certificate expired, and no one has set themselves an alarm to have replaced it. They get 13-month certificates, the intention of which is to allow an organization to replace them the same time every year without facing imminent expiry. So whoever is supposed to have their hand on the tiller does not.
It’s not any sort of serious thing, it’s just a sign of inattentive ownership.
I just realised that this looks as though I was claiming to be one of the administrators at Tobacco Reviews. I'm just an unaffiliated end-user reporting that the problem is resolved.