This is the same issue as this one (although surfacing under different circumstances)
Having a hostname / full URL in an asset is guaranteed to cause trouble.
In this specific case, the assets were probably built before force_https was turned on.
Rebuild and you’ll be fine.