This is actually pretty funny in a catch-22 type of way ... If you put the link relation type webfinger.net/rel/profile-page into a web browser, the site redirects you to https ... and then the page tells you that the identifier starts with http not https.

It has to be http because of string comparison rules as defined in WebFinger.

I suspect that if whoever runs that site had kept it at http Google would have punished it in search results.