Firstly enable ways use HTTPS under SSL/TLS which will redirect all traffic to HTTPS. Then you have a few mixed content issues (Item 2 and 4 in the tutorial linked above). Also under SSL/TLS, enable Automatic HTTPS Rewrites. If you still don’t see the padlock or a message like ‘not fully secure’, then have a look at Community Tip - Fixing mixed content errors.