When login with direct website it show unsecure even if ssl certificate active

That’s normal. Having an SSL certificate simply means your website can use HTTPS, it doesn’t automatically ensure that it will.

If you do want that, you’ll need to configure your website accordingly. How to do that depends on how you’re building your website, but this article is a good place to start: