[slowpoison]

It's a bit disappointing that G10code[1] https identity verification fails. May be it makes sense given that he's short on $$$$.

[1] https://g10code.com/

[serf]

it's just self-signed.

All that means is that you are transferring trust to the owner of the site, rather than a CA, to properly deal with his own secure key, and that browsers hate it; but who cares about that part.

I trust the GnuPG set of tools, and I have so for quite sometime. On the opposite side of things I have witnessed a ton of CA hacks in recent years...