Is there a tool that will scan all elements on a webpage and report which item is making a non-SSL call? My webapp keeps showing the mixed use icon and everything I can see is good. :/
Have a look at Fiddler. You launch the application from your local machine and can see each and every HTTP request being made to load up your page. That will tell you for sure all of the elements that may be making non-SSL requests.