Your web server/website is configured to allow connections without verifying the identity of your server.