[mikester]

It appears they are likely using a 'self signed' certificate. The encryption will still be good but the authenticity mechanism that is also part of the SSL system isn't being taken advantage of.