EDIT:
ok, lesson learned. Logging out isn't enough. Close and reopen your browser when your testing with ssl certificates. Now it's green padlock across the board without any further warnings.
ORIGINAL:
Thanks for the links. While do do explain the whole certificate shizzle for controllers and captive portals, I'm just trying to get a valid certificate to show the 'green padlock' on the management interface.
The cert is valid and recognized as such, however chrome and other browsers warn about some resources falling outside the encryption.
So the question realy is, why and what is it pulling resources from elsewhere than my cppm server?