https://... what's the point of a X.509 project if the code you're downloading to run the CA wasn't done securely? :)