I can reproduce it even just with curl on Linux. The certificate is only for "*.marginalia.nu", which simply doesn't cover "marginalia.nu". It should give the

I can reproduce it even just with curl on Linux. The certificate is only for "*.marginalia.nu", which simply doesn't cover "marginalia.nu". It should give the same error on any platform and browser, unless their SSL implementation is broken. Some browsers try to be smart and insert www automatically though.