1. Generate the key private key file, such as:
openssl genrsa -des3 -out www.merrick.com.key 2048
2. Generate a csr file, such as:
openssl req -new -key www.merrick.com.key -out www.merrick.com.csr -config openssl.cnf
3. Submit the CSR document to a third-party legal certificate authority and pay the fee
4. Download and obtain a certificate issued by a third-party legal certificate authority
5. Deploy and install SSL certificate