Indeed. Also the SSL labs test shows a few issues. The most important is to disable SSLv3 and check why the certificate chain is incomplete.
LetsEncrypt is very easy to setup and renew for a Apache server.
Edit: your attachment isn't https either.
Edit 2: I found the issue with the editor. It is blocked because it is loaded via http.