I set up my site to use SSL and was auditing for insecure content and by process of elimination I found that the plugin serving insecure content is infact Jetpack, and only when connected to Wordpress (it doesn't function without that so that's not much help).
I don't see any options in Jetpack relating directly to either fonts or SSL so I'm not really sure what to look at to get this fixed. I went through the Network tab in Chrome's dev tools and every single resource there is HTTPS.
Jetpack and Wordpress are both up to date (Jetpack 3.7.2 and Wordpress 4.3.1 as of this moment). For now I've disabled Jetpack but I really want it and HTTPS.