YYYYYYEEEEEEEEEEEESSSSSSSSSSSSS @sterndata thank you!, thank you!, thank you!
Replacing all urls worked thank you SO MUCH!
I have the problem below now, seems it has to do with stylesheet, but I am happy to have my green padlock
Mixed Content: The page at was loaded over HTTPS, but requested an insecure stylesheet ‘https://fonts.googleapis.com/css?family=Cabin%3A400%2C500%2C600%2Cbold&ver=4.5.3’. This request has been blocked; the content must be served over HTTPS.