As said, it are your scripts (jquery) and fonts. Those are not a real big things, but if https is a big selling point then make sure all resources will go over an https connection. That will show the padlock icon in browsers and people can directly check the certificate.

edit: links are not the problem afaik. I use safari and it has the developer web inspector. Then you can check the page issues and in there it shows all these "warnings". It sounds very stupid and minor, but I know from my own experience that people will point to any little thing to find proof of whatever they are searching for.