Uses ACME.
Launching in 2015: A Certificate Authority to Encrypt the Entire Web | Electronic Frontier Foundation
Link
Reply
Facebook has launched its own hidden service on the Tor network. The service provides HTTPS access using a CA signed certificate, is not the norm for such services. This blog post is a good backgrounder and explains pros & cons of Facebook’s security/authentication choices.