There are many topics about mixed content errors.
Here’s one solution:
https://meta.discourse.org/t/font-family-not-working/344024/14?u=cocoquark
But there must be a reason some content isn’t loaded through HTTPS, as it should be the default with a standard install.