I’ve just validated this and posted Tweets with and without the https prefix - they seem identical, and to use the image I’ve seen in the metadata. Did you try running the updated site through the validator? Ordinarily, this should not have been cached for as long as 3 months, so I’m not sure what has happened.