Fix mixed content after enabling SSL

Your certificate is valid; the browser is complaining that part of the page arrives unencrypted. **Find it.** Open the browser console — every blocked request is listed with its URL. **Fix it at the source.** In WordPress, update the site and home URLs, then run a search-and-replace across the database for `http://yourdomain` → `https://yourdomain`. Editing only the settings leaves old image paths behind. **Then force HTTPS.** Redirect at the server rather than with a plugin, and add HSTS once you are confident nothing breaks — HSTS is difficult to undo, so leave it until last.