Looks like images are offloaded and the CDN is enabled, however there is a problem with the certificate.
ian@ians-tuxedo:~/Support $ curl -I https://hbh-media.ams3.digitaloceanspaces.com/wp-content/uploads/2020/01/14153430/post-image-5.jpg
HTTP/1.1 200 OK
content-length: 312092
accept-ranges: bytes
last-modified: Tue, 15 Mar 2022 11:27:48 GMT
x-rgw-object-type: Normal
etag: "b01f55b9f14576420491a37ef08f2279"
cache-control: max-age=31536000
x-amz-request-id: tx0000000000000141e16b3-006231cf06-1d147b7f-ams3c
content-type: image/jpeg
date: Wed, 16 Mar 2022 11:50:30 GMT
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
strict-transport-security: max-age=15552000; includeSubDomains; preload
ian@ians-tuxedo:~/Support $ curl -I https://hbh-media.ams3.cdn.digitaloceanspaces.com/wp-content/uploads/2020/01/14153430/post-image-5.jpg
HTTP/1.1 200 OK
Date: Wed, 16 Mar 2022 11:55:15 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Content-Length: 312092
Content-Type: image/jpeg
X-HW: 1647431714.dop023.lo4.t,1647431714.cds278.lo4.shn,1647431714.dop023.lo4.t,1647431715.cds285.lo4.p
x-rgw-object-type: Normal
etag: "b01f55b9f14576420491a37ef08f2279"
cache-control: max-age=31536000
x-amz-request-id: tx0000000000000141b3e2d-006231d023-1d14aa62-ams3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
Last-Modified: Tue, 15 Mar 2022 11:27:48 GMT
ian@ians-tuxedo:~/Support $ curl -I https://media.horseboxheaven.uk/wp-content/uploads/2020/01/14153430/post-image-5.jpg
curl: (60) SSL: no alternative certificate subject name matches target host name 'media.horseboxheaven.uk'
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
ian@ians-tuxedo:~/Support $
You’ll need to try and fix that certificate on the CDN, maybe with DigitalOcean support’s help.
-IJ