A missing padlock does not always mean mixed content
Browser security indicators vary. Browsers can block or upgrade HTTP resources, and a page policy may upgrade them too. This tool reports the URLs written in the source. Use your browser’s Network and Console panels to confirm what actually loads.
Check the installed SSL certificate