Hi,
That error is only a consequence of the real issue.
If you click on the add to cart button on your website and look at the network tool of your browser, you can see two requests:
monosnap.com/file/Z1vjJ2TTqTSWSOdcJ7pgLDghTK7KSo
If you look at the first one, you can see that it has the https:
monosnap.com/file/8uvpySmojvYQ3wZJtL5M6FfHtn5PdK
However, your server returns a redirection leading to the javascript of the add to cart to do the second request, without the https in the URL:
monosnap.com/file/lavpACpSWwqsnWyHibxQfHI63IRnHg
And this is the one that is blocked as insecure.
So the problem, as you found out already, was indeed that you must have added some kind of redirect rule (either on the server, in the config of the apache, or in a htaccess, or with a component which can do redirect rules) and the rule breaks the add to cart links because it does a redirect while it shouldn't.