But still insecure connections to various resources (scripts and fonts).
That would be the ads we have from adbit.co. I see the banner is actually not loading.
As said, it are your scripts (jquery) and fonts. Those are not a real big things, but if https is a big selling point then make sure all resources will go over an https connection. That will show the padlock icon in browsers and people can directly check the certificate.
We do have the padlock, and it does give our certificate information.
