Tried in Postman and everything works when "Enable SSL certificate verification" is turned off. When it is on then the POST won't go through. So I suppose Shortcuts have this SSL certificate verification enabled :).. if nobody knows any way around it then maybe someone can give some hints to make an simple app which will show up in shortcuts app but can make request to insecure url.