It's just the Favicon that is requested unsecure via http from the same domain. I don't think that is a big security issue.