If you do not have a certificate already, then you need to request a certificate from the CA. In order to request a certificate, you need to generate a CSR (Certificate Signing Request). This can be done from the router itself. check out this link : Create a Certificate Signing Request

Note: If you are using the above link, then then you are done with certificate installation. You can proceed to next section.

In our case, we already have a wildcard cert (*.justnetworks.ca) issued to us so we re-use the same certificate for this lab. If we did not have a signed certificate, we would then follow the same procedure in the above link. Since we already have a certificate, we will open the file using notepad and copy the contents and keep it ready for the next step where we import the certificate.