There was a bug where even if the merchant's domain started with https://, the affiliate link would show up as http://. The link would still redirect to the correct https:// domain, but it would show up in the affiliate's dashboard as http:// (display issue only).