[raimue]

It does not have a valid certificate just like any other custom domain hosted on GitHub Pages.

[mixedCase]

Then you shouldn't consider either GH pages for hosting a security-oriented project or a custom domain redirect.