OK, I fixed the "not secure" issue on the main page but have noticed when I open most threads the not secure notice comes back. What is causing this is that the user uploaded avatar is using http: instead of https:
I need everybody to go into their profile and if their avatar image starts with http change it to https.
Thanks.