Oops, turns out the official CDN doesn't do HTTPS...