I had this problem on a html page today. In the embed code that you can copy from Instagram by clicking the three little dots at the top of the page, there are three instances of the image permalink. Two of them start https one http. By changing the one that reads http to https, I solved this problem on my page.