Nachtrag: Chrome ist genauer:
Mixed Content: The page at 'https://public.server.tld/webclient/' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://public.server.tld/nuclos/rest/version'. This request has been blocked; the content must be served over HTTPS.