debian download linking to a subdomain that does not have valid SSL cert

https://www.debian.org/distrib/netinst links to cdimage.debian.org which has 
this warning/error:

Websites prove their identity via certificates. Firefox does not trust this 
site because it uses a certificate that is not valid for cdimage.debian.org. 
The certificate is only valid for the following names: acc.dl.osdn.jp, 
archive.sunet.se, chuangtzu.ac2.se, chuangtzu.ftp.acc.umu.se, 
chuangtzu.mirror.accum.se, ftp.ac2.se, ftp.academiccomputerclub.se, 
ftp.acc.umu.se, ftp.accum.se, ftp.sunet.se, gemmei.ac2.se, 
gemmei.ftp.acc.umu.se, gemmei.mirror.accum.se, laotzu.ac2.se, 
laotzu.ftp.acc.umu.se, laotzu.mirror.accum.se, meetings-archive.debian.net, 
mirror.ac2.se, mirror.academiccomputerclub.se, mirror.acc.umu.se, 
mirror.accum.se, napoleon.acc.umu.se, napoleon.ftp.acc.umu.se, 
napoleon.mirror.accum.se, raspi.debian.net, saimei.ac2.se, 
saimei.ftp.acc.umu.se, saimei.mirror.accum.se, tutankhamon.acc.umu.se, 
tutankhamon.ftp.acc.umu.se, tutankhamon.mirror.accum.se

There is at least a couple debian.net's in that mix, so i am hopeful this is 
not an attack!

best,

ben

-- 
https://agaric.coop
+1 508 737 0582

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEg7ACsJgQQ1KdLjku5TvH2optf/wFAmeUPwMFAwAAAAAACgkQ5TvH2optf/wK
aAf+LjECsE7p/jCS8RXEp+huqwWK75hhZkVHepWrCvmUWfLYaT8Qgjde/KkVLp5fBWXDcZMvvEA9
NQweeSWU9W5rlDVg6BkDVPwnMzoJ6Nyqw53itGTzaIvL2mF40vipHbyuHiIqBORNI/shz2UF46lv
YwHfGeBH/pWds9WqQBnOyh7cwdcCv70L3xREYWQ1etsx9gNyByMizJ7s6URatj9ewayLg0tV8JLJ
FD20/sxlA+WAT5OH3tl/ZxgXBc+ritiRPNdPmk3s1LshVfrhf66uS33JKSls6uOYwKnLWtEXQksl
2hfgN9vvZ+wQ1WoWRr3X6p3BfPDQEbH+e0A6faJ8vg==
=eCS+
-----END PGP SIGNATURE-----