Yes, normally certificate errors would be thrown. In this case Apple is not performing the domain validity checks on the presented cert. This allows an attacke

Yes, normally certificate errors would be thrown. In this case Apple is not performing the domain validity checks on the presented cert. This allows an attacker that is performing an mitm attack to present a valid cert for another domain and establish an SSL connection with the victim.