SSL certificates are published by companies which are specialized in issuing and hosting SSL certificates. In order to obtain such a certificate you need to make a contract and purchase a certificate dedicated to your company. This certificate will be known to the whole web and will contain information regarding your company, the certificate issuer, and your web site.
Example for a secured web site
You start by creating a OpenSSL (Certificate Signing Request) file. There are several tools to create s CSR file. OpenSSL is a tool widely used for that task. After you created the CSR file, you must send it to your certificate authority, and they will verify the information you provided in the CSR file. If the verification is successful, they will sign your certificate and issue the certificates.
Your certificate authority will guide you through the process of creating a CSR file and receiving the certificates.
After a successful application, you will receive your certificate files. As described in the previous section, you need three files to distribute with your server: root.pem, cert.pem, and key.pem.
Note: Some times, cert.pem and key.pem come in a single file. In this case, you need to open this file with a text editor and save the individual certificates in separate pem files.