Choose a certificate authority (CA)
Generate a private key and certificate signing request (CSR)
Submit the CSR to the CA
Complete domain validation
Receive the issued certificate files
Install the certificate on your web server
Install any intermediate certificates or certificate chain
Configure your server to use HTTPS
Restart or reload the web server
Test the HTTPS setup
Set up certificate renewal before expiration