#Force HTTPS

HTTPS Not Forced — Site Loads on Both http and https

Your site answers on both http and https, so Google indexes two copies and Chrome flags http as Not Secure. Add a 301 redirect plus an HSTS header to fix it.