Confirming the job is done.
CHECK SEVERAL PAGE TYPES
Homepage A blog post with images, ideally an old one A page with a form A product page, if you run a shop Checkout The admin area
WHY OLD POSTS MATTER MOST
Content created before HTTPS was enabled is where absolute http URLs live. New content is generated correctly.
THE METHOD
Open each in a private browsing window with the console open, and confirm no mixed content warnings.
Click the padlock and confirm the browser reports a fully secure connection rather than a partial one.
USE A SCANNER
For a large site, an online mixed content scanner crawls many pages and reports every instance, which is impractical to do manually.
CLEAR CACHES FIRST
A cached page serves the old version. Purge your caching plugin, Cloudflare and your browser before testing, or you will be looking at stale output.
ONGOING
New content can reintroduce it if someone pastes an http image URL. Check occasionally rather than assuming it stays fixed.
