What’s the best way to get this done?

Purchase the certificate and then? Is there a good WP plugin which can help me with this?

Please don’t flame, I am noob with web security

Haven’t done it personally (usually keep the SSL stuff on a separate subdomain) but this looks like it’ll do what you’re after: