See here https://github.com/jenkinsci/embeddable-build-status-plugin/issues/66

Using the automatically generated self-signed SSL with Jenkins, means that even with the unprotected URL, the badge cannot typically be displayed anywhere as the SSL is deemed unsafe.