SSL still displaying as unsecure - apache

Question

I'm trying to set up my SSL certificate but the site still says that https is unsecure.
I've edited the 000-default.conf as follows:
<VirtualHost *:80>
ServerName millingtonmayers.co.uk
Redirect permanent / https://millingtonmayers.co.uk/
</VirtualHost>
<VirtualHost *:443>
ServerName millingtonmayers.co.uk
SSLEngine on
SSLCertificateFile /home/bensleym/millingtonmayers.co.uk.crt
SSLCertificateKeyFile /home/bensleym/millingtonmayers.co.uk.key
SSLCertificateChainFile /home/bensleym/intermediate.crt
# The ServerName directive sets the request scheme, hostname and port that
# the server uses to identify itself. This is used when creating
# redirection URLs. In the context of virtual hosts, the ServerName
# specifies what hostname must appear in the request's Host: header to
# match this virtual host. For the default virtual host (this file) this
# value is not decisive as it is used as a last resort host regardless
# However, you must set it for any further virtual host explicitly.
#ServerName www.example.com
ServerAdmin webmaster#localhost
DocumentRoot /var/www/html
# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
# error, crit, alert, emerg.
# It is also possible to configure the loglevel for particular
# modules, e.g.
#LogLevel info ssl:warn
ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined
# For most configuration files from conf-available/, which are
# enabled or disabled at a global level, it is possible to
# include a line for only one particular virtual host. For example the
# following line enables the CGI configuration for this host only
# after it has been globally disabled with "a2disconf".
#Include conf-available/serve-cgi-bin.conf
</VirtualHost>
The redirect doesn't seem to be working either any ideas?

Answer 1

Have signed the certificate(millingtonmayers.co.uk.crt) from CA? when i inspect it says :
Start Time: 1499176042
Timeout : 300 (sec)
Verify return code: 18 (self signed certificate)
if it is self-singed it is untrusted.
you can check this using "openssl s_client -connect millingtonmayers.co.uk:443" on a console

Answer 2

certificate signing process as follows:
Genarate key and the csr
"openssl req -new -newkey rsa:1024 -nodes -keyout millingtonmayers.co.uk.key -out millingtonmayers.co.uk..csr"
2.Send the CSR for CA agent like comodo (https://www.instantssl.com/free-ssl-certificate.html).you will get the following certificates from the CA.
 CA agent will provide 3 certs
2.1.The Root Certificate
2.2.Intermediate certificates
2.3. millingtonmayers.co.uk.crt
You can get 90 days free cert from above
3.concatanate the above 3 certificate to one.
cat millingtonmayers.co.uk.crt DigiCertCA.crt TrustedRoot.crt >millingtonmayers.co.uk.concatanated.crt
4.configure the millingtonmayers.co.uk.concatanated.crt and millingtonmayers.co.uk.key to lb