You can use some certificate generation tools to generate certificates for your own https site (such as keytool of jdk), which is called "self-signed certificate". However, the certificates generated by you are not recognized by the Internet, so the browser will report a security prompt and ask you to install the certificates manually. Only certificates paid by authoritative CA institutions can be recognized by the Internet (somewhat similar to the authority of the root domain server).