when I try to connect over https I get a cert error

You attempted to reach www.bitbucketcards.com, but instead you actually reached a server identifying itself as *.herokuapp.com....

If I have private bitbucket repos I'm not exactly going to expose all the secrets without ssl

I think the cards really make the issue tracker worthwhile. Shame it's not secure