Pete, that's likely back to the hardcoded http (stylesheet) URLs you've added to your certain templates to accommodate WorldPay's other bugs.
If you're going to hardcode a URL on an SSL page, you need to use https instead of http.