old https security debian org does not redirect to new page, invalid ssl cert instead

Previously the web page for debian security was located on:

security.debian.org

Going there now through http, will redirect to the new address
www.debian.org/security/

But going there through https, will instead return SSL errror, cert by
unknown CA "Debian SMTP CA" which seems to have "CA key identifier" "00
f6 08 13 4a 49 f7 da d3",
entire cert sha256 fingerprint is
"DF:68:20:DA:43:5A:7C:1A:9C:43:8B:56:56:24:92:A5:E6:EC:F6:B1:92:8F:D1:4C:9F:5D:93:C7:7D:13:26:1B"