$ sudo apt-get update
$ sudo apt-get install ssl-cert
$ sudo a2enmod ssl
$ sudo service apache2 restart
$ sudo mkdir /etc/apache2/ssl
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/domain.key -out /etc/apache2/ssl/domain.crt
Country Name : myCountryCode
State or Province Name (full name) [Some-State]: myState
Locality Name (eg, city) []: myCity
Organization Name (eg, company) [Internet Widgits Pty Ltd]: myCorp
Organizational Unit Name (eg, section) []: myCorpUnit
Common Name (e.g. server FQDN or YOUR name) []: yourDomain
Email Address []: myEmail
http://serverfault.com/questions/599219/how-to-decide-where-to-purchase-a-wildcard-ssl-certificate
# SSL CONFIG
SSLEngine on
SSLCertificateFile /etc/apache2/ssl/domain.crt
SSLCertificateKeyFile /etc/apache2/ssl/domain.key
SSLCertificateChainFile /etc/apache2/ssl/domain-chainfile-bundle.crt
Sources: