If you are using custom domain to your subdomain with CNAME, you will need a separate certificate for that custom domain.
HTTPS protocol is valid for all *.helpjuice.com subdomains, and when you're using CNAME your domain HTTPS is no longer valid for *.customDomain.com. HTTPS still exists on your KB login page and it exists when you don't use CNAME, but when you do use CNAME the HTTPS isn't shown.
With the $249, Scale up plan we can upload your SSL certificate on our servers, and HTTPS will work for your custom domain.
The less secure option is disabling Force SSL feature in Settings page (image below) and data encryption won't be forced.