It seems to depend on your host as to whether or not you need a copy of your site in the secure area. I don't with my host. I don't think a dedicated SSL certificate will fix that, but you can ask your host (or Merlin).