Thanks for mentioning thus, we received the report and it was corrected last week. Now, if you reset your password the link will point to Wishpot.com with a valid certificate.
Wishpot never had a second life certificate because the authentication was always via secondlife's servers, openid. Now that we're offering the ability to set a Wishpot password, we do need a secure channel, which is why we updated the links. Hopefully that makes sense!
Tom