As an alternative solution, why not use only one of the two URLs? You can essentially tell by inspection that these are the same file but one using TLS.
The issue is not with their certificate, it is a problem with the next level up certficate (the intermediate certificate authority) - Let's Encrypt. Their certificate expired yesterday.