Dear @ctgraham, that is right. When OJS is behind of Apache, it is necessary set up $allowProtocolRelative parameter to true, otherwise the system will not load propertly. On the other hand, IT department, at my university, recommend to use secure protocols like HTTPS. In my case, the digital certified is implemented over a server that serves all request, but not into self application server, e.g. where OJS is installed. Aforementioned, $baseUrl should be adjusted for generates propertly all URL, like shown in OAI report or e-mails templates.