HTTPS page with HTTP resources inside — Mixed Content error.
Types
Passive (images) — browser shows but no lock. Active (JS/CSS) — doesn't load.
Fix
SQL replace http → https in DB. Or // (protocol-relative).
CSP
upgrade-insecure-requests header.
Finding
Chrome DevTools Console, whynopadlock.com.