Sounds like a classic SSL termination issue at the load balancer. Make sure it's passing the 'X-Forwarded-Proto' header so Kentico knows it's an HTTPS request. Enabling 'Enforce HTTPS' in the settings should also help clean up those double redirects. Good luck!