https://lua.org doesn't redirect to the www site and shows a cert error.
Indeed. Firefox says the following: lua.org uses an invalid security certificate. The certificate is only valid for the following names: pepperfish.net, *.pepperfish.net, www.pepperfish.net Error code: SSL_ERROR_BAD_CERT_DOMAIN