{"id":861,"date":"2025-12-19T10:04:36","date_gmt":"2025-12-19T09:04:36","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=861"},"modified":"2026-06-02T03:53:51","modified_gmt":"2026-06-02T01:53:51","slug":"ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/","title":{"rendered":"SSL certificate &#8211; Mixed Content &#8211; the reason for the lack of a green padlock"},"content":{"rendered":"\n<div class=\"translation-block translation-block-merged\">\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#Context\" >Context<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#Diagnostics\" >Diagnostics<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#1_Check_the_SSL_status_in_the_browser\" >1. Check the SSL status in the browser<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#2_Open_developer_tools\" >2. Open developer tools<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#3_Check_the_Console_tab\" >3. Check the Console tab<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#4_Identify_affected_resources\" >4. Identify affected resources<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#How_to_fix_mixed_content_issues\" >How to fix mixed content issues<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#HTML-based_websites\" >HTML-based websites<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#WordPress_websites\" >WordPress websites<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#Recommended_plugin\" >Recommended plugin<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#Installation_steps\" >Installation steps:<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#Practical_implications\" >Practical implications<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/ssl-certificate-mixed-content-the-reason-for-the-lack-of-a-green-padlock\/#Summary\" >Summary<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Context\"><\/span>Context<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Modern browsers require websites to load all resources (pages, images, scripts, styles) over a secure HTTPS connection. Even if a valid SSL certificate is installed, the browser may still show a warning or a missing\/gray padlock if some elements are loaded over HTTP.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This issue is known as <strong>mixed content<\/strong>.<\/p>\n\n\n\n<\/div>\n\n<div id=\"mybox-1660373226\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Early access<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Still need help?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contact our customer service team.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Message us<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\">It does not necessarily mean the SSL certificate is invalid, but that parts of the website are not fully secured.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Diagnostics\"><\/span>Diagnostics<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">After adding a website in the mybox panel, a free Let&#8217;s Encrypt SSL certificate is automatically generated and applied. If it is active, the website should normally load over HTTPS without issues.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, you may still see:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>a warning icon in the browser<\/li>\n\n\n\n<li>a yellow or missing padlock<\/li>\n\n\n\n<li>a message indicating the connection is not fully secure<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">To diagnose the issue:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Check_the_SSL_status_in_the_browser\"><\/span>1. Check the SSL status in the browser<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Click the lock or warning icon in the browser address bar to verify certificate details.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Open_developer_tools\"><\/span>2. Open developer tools<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Right-click on the page and select <strong>Inspect<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_Check_the_Console_tab\"><\/span>3. Check the Console tab<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Go to the <strong>Console<\/strong> tab.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You may see warnings about resources loaded via <code>http:\/\/<\/code> instead of <code>https:\/\/<\/code>. These indicate mixed content issues.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Common examples:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>images loaded via HTTP<\/li>\n\n\n\n<li>scripts or CSS files using insecure links<\/li>\n\n\n\n<li>external resources not supporting HTTPS<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"4_Identify_affected_resources\"><\/span>4. Identify affected resources<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The console output will show which files or URLs are causing the issue. These must be corrected manually or through CMS settings.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_fix_mixed_content_issues\"><\/span>How to fix mixed content issues<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The solution depends on how your website is built.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"HTML-based_websites\"><\/span>HTML-based websites<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If your website is built manually (without a CMS):<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Review the source code<\/li>\n\n\n\n<li>Replace all <code>http:\/\/<\/code> links with <code>https:\/\/<\/code> where possible<\/li>\n\n\n\n<li>Ensure all external resources support HTTPS<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">To enforce HTTPS site-wide, you can add the following rule to your <code>.htaccess<\/code> file:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">RewriteEngine On<br>RewriteCond %{HTTPS} !=on<br>RewriteRule ^ https:\/\/%{HTTP_HOST}%{REQUEST_URI} [L,R=301]<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WordPress_websites\"><\/span>WordPress websites<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For WordPress-based websites, the simplest solution is to use a plugin that automatically fixes insecure resource URLs.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Recommended_plugin\"><\/span>Recommended plugin<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Install <strong>Really Simple SSL<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Installation_steps\"><\/span>Installation steps:<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>In the WordPress dashboard, go to:<br>Plugins \u2192 Add New<\/li>\n\n\n\n<li>Search for:<br>Really Simple SSL<\/li>\n\n\n\n<li>Click <strong>Install Now<\/strong><\/li>\n\n\n\n<li>After installation, click <strong>Activate<\/strong><\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">In most cases, default settings are enough to resolve mixed content issues by rewriting resource URLs to HTTPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Practical_implications\"><\/span>Practical implications<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SSL certificate may be valid even if the padlock is not fully green<\/li>\n\n\n\n<li>Mixed content is caused by website resources, not the certificate itself<\/li>\n\n\n\n<li>Fixing requires updating HTTP references in code or CMS settings<\/li>\n\n\n\n<li>Browsers may cache results, so changes may not appear immediately<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Summary\"><\/span>Summary<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Mixed content occurs when a website loaded over HTTPS includes resources loaded over HTTP. Even with a valid SSL certificate, this prevents browsers from showing a fully secure padlock. The issue is resolved by ensuring all website resources are loaded over HTTPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[11,25],"manual_kb_tag":[190,1546,242,1547,283,1548,371,1549,372,1550,419,1551,571,1552,588,1553,718,1554,721,1555,722,1556,723,1557,850,1558,1543,1559,1544,1545],"class_list":["post-861","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-ssl-certificates","manualknowledgebasecat-hosting","manual_kb_tag-wordpress","manual_kb_tag-green-padlock","manual_kb_tag-mybox","manual_kb_tag-browser-warnings","manual_kb_tag-mybox-panel","manual_kb_tag-encrypted-connection","manual_kb_tag-lets-encrypt","manual_kb_tag-really-simple-ssl","manual_kb_tag-ssl-certificate","manual_kb_tag-https-redirect","manual_kb_tag-wordpress-plugin","manual_kb_tag-browser-console","manual_kb_tag-online-store","manual_kb_tag-broken-references","manual_kb_tag-website","manual_kb_tag-secure-website","manual_kb_tag-htaccess-file","manual_kb_tag-force-https","manual_kb_tag-rewriteengine","manual_kb_tag-browser-security-warnings","manual_kb_tag-rewriterule","manual_kb_tag-insecure-content","manual_kb_tag-rewritecond","manual_kb_tag-http-resources","manual_kb_tag-http","manual_kb_tag-console-debugging","manual_kb_tag-https","manual_kb_tag-secure-channel","manual_kb_tag-mixed-content","manual_kb_tag-mixed-content-errors"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":3,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/861\/revisions"}],"predecessor-version":[{"id":3923,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/861\/revisions\/3923"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/media?parent=861"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manualknowledgebasecat?post=861"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb_tag?post=861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}