title: Connection to the site is still not fully secure after setting SSL
body: <p>I have set up <code>www.myapp.io</code> which connects to a MEAN-stack application hosted by nginx. I just added SSL (by <code>let's encrypt</code>) to it, and set <code>Full</code> in <code>Cloudflare</code>. Now, <code>https://www.myapp.io</code> works and <code>http://www.myapp.io</code> is redirected to <code>https://www.myapp.io</code>.</p>
  
  <p>However, the small exclamatory mark in the address bar of Chrome shows <code>Your connection to this site is not fully secure</code>.</p>
  
  <p>Does anyone know where is the problem?</p>
  
  <p>Note that, when I developped this MEAN-stack application in my MAC with <code>localhost</code>, I needed to call <code>https://localhost:3000</code>, to achieve this, I have followed <a href="https://stackoverflow.com/a/42684366/702977">this approach</a>, including adding the following block in <code>www</code>:</p>
  
  <pre><code>var fs = require("fs");
  var config = {
      key: fs.readFileSync('key.pem'),
      cert: fs.readFileSync('cert.pem')
  };
  var server = https.createServer(config, app).listen(3000);
  </code></pre>
  
  <p>So I don't know if I need to (and how to) change this.</p>
  
  <p>Given my <a href="http://pasted.co/b58349e2" rel="nofollow noreferrer">current server block of nginx</a> has already the <code>.pem</code> information, if I write <code>var server = https.createServer(app).listen(3000)</code>, the <code>npm start</code> works, whereas <code>https://www.myapp.io</code> considers the server is offline.</p>
  
  <p>Could anyone help?</p>
  
  <p><strong>Edit 1:</strong> I just realised that different pages may have different security information, even for the same domain. For example,</p>
  
  <p><code>https://www.myapp.io/#/new</code> shows <code>secure</code>:</p>
  
  <p><a href="https://i.stack.imgur.com/Ob17T.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Ob17T.png" alt="enter image description here"></a></p>
  
  <p>Whereas, <code>https://www.myapp.io/#/home</code> shows <code>not fully secure</code>:</p>
  
  <p><a href="https://i.stack.imgur.com/Jo04N.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Jo04N.png" alt="enter image description here"></a></p>