Chrome throw errors caused by mixed content (insecure elements on a secure site). Error from Chrome developer console: "Mixed Content: The page at 'https://mysite.com/index.php/login:1' was loaded over HTTPS, but requested an insecure script 'http://mysite.com/index.php/install'. This request has been blocked; the content must be served over HTTPS."

Meaning, that concrete5 explicitly refers to the HTTP variant.

Possible fix for JS/CSS resources is to leave out the protocol, that way, it would automatically select HTTP or HTTPS, depending on what is used.