How to fix the https "not secure" message in Chrome?

Question

My website is a WordPress based website located here: https://www.saintjohnscamp.org/. I cannot figure out how to fix the https "not secure" message that comes up when you view the site in Google Chrome, which reads: "Your connection to www.saintjohnscamp.org is encrypted using 256-bit encryption. However, this page includes other resources which are not secure..." I have tried disabling all plugins in WordPress and looked at the source code of the page and cannot find any images, iframes, objects, etc. that are pulling from http:// instead of https://. The only instances of http:// in the source code are external links, which don't affect the not secure message (to the best of my knowledge). Can anyone point me in the right direction here? Is there a utility or service out there I can use to troubleshoot this message and fixing my page to be fully https compliant?

Solution 1

To view the request with Wireshark:

Close other browsers, open Wireshark, select Capture - Interfaces, and select Start on the active internet device. Then enter "http" in the top filter box, it will show current http requests and responses. You could also filter by port 80 (http) or 443 (https).

Wireshark shows the site is requesting http, not https, for:

platform.twitter.com/widgets.js?ver=1.1

twitter.com/javascripts/blogger.js

api.flickr.com/services/feeds/photos_public.gne

and other twitter.com and flickr.com urls.

Solution 2

I think your problem is that URL:

https://lite.piclens.com/current/piclens_optimized.js

Piclens only offers this two versions:

• http://lite.piclens.com/current/piclens.js full commented file (~39KB)
• http://lite.piclens.com/current/piclens_optimized.js lighter deployment file (~21KB)

Piclens current SSL certificate has expired.