Please note that if you're trying to track secure pages on Heatmap Tracker, then the domain on which Heatmap Tracker is installed MUST have a registered SSL security certificate of its own. If Heatmap Tracker's domain does not have a security certificate, it cannot track secure pages.
Also be advised that subdomains are treated as independent domains and require their own SSL certificate.