I noticed today, why main page is without ssl? http://centminmod.com/
There is both an SSL and non-SSL version. I guess eva is just not redirecting to HTTPS with his vhost config.