If your browser shows a warning or a broken padlock even though you have an SSL certificate, your page is loading some content, such as images, scripts or fonts, over insecure http://. This is called mixed content.
To find the cause:
- Open your website in Chrome or Firefox.
- Press F12 to open developer tools and select the Console tab.
- Look for warnings mentioning "Mixed Content". Each one names the file being loaded over http.
To fix it:
- Change the links in your pages, theme or stylesheet from
http://tohttps://. - WordPress: use a search-and-replace plugin such as Better Search Replace to change
http://yourdomain.co.uktohttps://yourdomain.co.ukthroughout the database. Take a backup first. - For content from other websites, check that the other site supports https. If it does not, host a copy of the file on your own site.
Clear any caching (see Manage the NGINX cache) and your browser cache, then reload the page.
