I recently developed a website that has a real SSL area protected by a real valid SSL certificate.
However, I was getting complaints that, under SSL, browsers croaked about some parts being sent over an insecure connection.
I dug on the situation and found that because I was using Google Analytics, the
<script> URL is
HTTP under the SSL area. To get it working under SSL areas just change the URL:
<script src="https://ssl.google-analytics.com/urchin.js" ...
Out of SSL:
<script src="http://www.google-analytics.com/urchin.js" ...