As I’m running my WordPress on Nginx, so I can’t help on the .htaccess one. But I can comment on the padlock issues. There are a few things need to be done at WordPress:
- Login into WordPress Admin Dashboard, and go to WordPress
Settings and change the WordPress Address (URL) and the Site Address
(URL) from HTTP to HTTPS, and flush the cache if necessary. This
should fix most of the no padlock issue. - Check your html head
section to see if you have any hardcoded links, scripts or
css(potentially from some plugins, e.g. like
http://fonts.googleapis.com/css?family=Lato:100,400,700 - The images links that uploaded before implementation may have the http:,
i found it is easier to use an online service such as
whynopadlock to scan the site. and then go to your posts and
open the post that has mixed http/https and fix it (likely images
links that uploaded before the ssl implementation).