HTTPS, certificate, HSTS, content-security policy, mixed content and end-of-life software that never got patched.