A website may have a valid SSL certificate while still loading some images, scripts, or styles over HTTP. That is mixed content.
Steps
- Open the affected HTTPS page and identify which resources the browser reports as insecure.
- Update hard-coded HTTP resource URLs in your application, theme, or page content to the correct HTTPS URLs.
- Confirm that third-party resources actually support HTTPS before changing their addresses.
- Clear the relevant application cache and retest the page, including forms and checkout steps.
Good to know
Renewing the certificate alone will not rewrite old links inside website content. Do not disable browser security to hide the warning. Back up the database before any bulk URL replacement and use a tool that understands the application data format.
Need help? Open a support ticket and include your domain and the step where you need assistance. Never include your password.
