there should not be any cart links that start with http://. That would automatically take it out of ssl.

Hard to tell without looking at your site. do you have any mods installed?