ssl certificate how to

HOWTO Set Up SSL Using IIS 5.0 and Certificate Server 2.0

Otherwise, you need to create a certificate request and send it off to a
certification authority (CA) to get your certificate.

Alternatively, you can self-sign your own certificate. I think there is a
tool in the IIS 6.0 Res Kit that allows you to do that.