When sending facts in excess of HTTPS, I know the content is encrypted, having said that I listen to blended solutions about if the headers are encrypted, or the amount with the header is encrypted. The web site has an expired certficate, but I am not sending sensitive info, so it won't issue