I combined the process below basically:

https://www.digicert.com/csr-ssl-installation/ubuntu-server-with-apache2-openssl.htm

https://www.turnkeylinux.org/blog/ssl-certificates