Changes

P.S. You don't need a cert on your blog. A self-signed cert is fine, but even that isn't necesary for the login area. Instead, you can consider changing the name of the Admin directory to something unpredictable (though I'm not sure how this will affect the integrated "edit" feature on blog posts) or else just make your password very secure and change it every now and then. I've been having my struggles with WordPress lately, though it seems to work well for many others. Other good options include ExpressionEngine and MovableType (though it depends what you want to do with it - neither of these is open source and there are other good open source options too, though I suppose you know all that anyway!).