I’m working on a website with a custom domain through bluehost, and it gets blocked on firefox and safari as not secure, even though it should be secured. The site itself is https through Github, and hosted at a custom domain through Bluehost.

Despite Why No Padlock showing that SSL is active and SSL Checker showing that my SSL is installed properly, when I go to my site (blueboy.space) on a public network, it is blocked because my browser says it isn’t secure.

I read that this could be happening due to having mixed content (i.e. any http links), but the only external link on the site is an https link to substack, all my images are relative directory links, not external.

Am I missing something? Can anyone help me?