This is normally because the URL in $CFG->wwwroot (in config.php) is HTTP but the URL used in the browser is HTTPS. These must be the same.
Moodle uses this setting to load resources like CSS and JavaScript, but if $CFG->wwwroot is HTTP and HTTPS is used in the browser, the browser will block non-HTTPS content.