One more thing I noticed. I don't know if this changes anything but
if you right click the checkout button and open it in a new browser window (or tab) it now does show up as secure. Only when it opens in the same frame does it NOT show up as secure. Is that just the .htaccess file or is there something else I can do to get it to work properly?
My web host says that zencart isn't set up to use shared ssl and I should upgrade to my own certificate, which I will if that is the only option to fix this.
Thanks