[SOLVED] credit card icons are hard-coded for HTTP?

Chrome is now removing all formatting of a page if there is a non-HTTPS element on a secure URL it seems. When my users click to reactivate an expired subscription, the template is lost on the next page. I checked the URL are and there's a place to enable non-secure elements. The site looked normal after I clicked that. I checked the code and the credit card icons are all coded HTTP on the HTTPS page:

this was caused by an expired SSL cert. Some software (mod_security?) was forcing HTTP. So, not a CBsubs issue at all.