SSL Active but site still not secured (I followed all the steps)

The issue is you need an SSL certificate on your server. As long as you dont have that your site cannot be secure. Your webhost should configure that for you, and, no, you dont need buy one (even if they claim that) as there are plenty of free ones, including Lets Encrypt and Cloudflare’s own origin certificates.

If your host refuses to honour that request I’d seriously suggest to switch to a better and more competent host.