It's a stopgap measure (because you have to click through the cert exception, because the domain name on the cert doesn't match the URL), but it will still encrypt the data just fine.

The warning will confuse some people (such as yourself); that's why the dev asked if it was okay.