TLS is one layer below HTTP. So yes, both headers and body are encrypted.