As confirmed by someone else on IRC, HTTPS is broken for distfiles.gentoo.org. The cert seems to belong to *.osuosl.org.
distfiles.gentoo.org prior to a recent experimental deployment never had HTTPS. It will get it in the near future, but not quite yet.