Their EFA endpoint is broken since some time, the TRIAS one works. Neither one of those has TLS unfortunately though.