While testing page overlay I got a SSL error message that could be fixed by manually changing the default tracking code.
''var pkBaseURL = (("https:" == document.location.protocol) ? "https://" : "https://");
Earlier I had to apply a similiar modification to the noscript code:
<img src="https://" style="border:0" alt="" />
Is there a reason for not declaring those two links as https?