Here's a big list of things to be aware of when switching an http site over to https. Ignore the bit about social buttons, just don't use them.