You can use OpenSSL to generate a self-signed https certificate, but this self-generated https certificate is not trusted by the browser, and the browser will still prompt "unsafe" and don't mind using it.

You can choose an https certificate issued by a regular CA organization. The application process is as follows:

The first step is to submit the CSR file.

Select the SSL certificate to apply for, submit the order, and submit the generated CSR file together. ?

The second step is to submit the order to CA?

After receiving your order and certificate application CSR file, the system will automatically submit the order to CA after preliminary verification.

Step 3: Send a verification email to the administrator's mailbox?

The certificate service organization Comodo/RapidSL/GeoTrust/Symantec/Thawte receives the certificate application document, and the CSR file system automatically sends a verification email to the domain name administrator mailbox.

Step 4: User confirms the verification email?

Click the link in the email, visit the verification website of the certification service organization, check the order information, and then click I confirm to complete the email verification.

Step 5: The certificate authority issues the certificate.

DV SSL generally issues certificates 1-24 hours after the user completes the confirmation and verification email; Enterprise certificate OV SSL and enhanced certificate EV SSL need manual verification by certificate service agencies, which takes a long time and takes 1-7 working days to issue certificates.