Decide the extent of safety required.
Decide the domains and subdomains to be supported.
Select a certificates authority/supplier.
Request the certificates from the chosen supplier.
Confirm area possession and different standards.
Acquire and set up the certificates.