I noticed that www.rubyonrails.org redirects rubyonrails.org, but there is no SSL certificate for www.rubyonrails.org (checked with https://hexometer.com/ssl-certificate-checker/rubyonrails.org).
Having a certificate for www.rubyonrails.org is a must because canonical URL's would be broken because of this.