Step-by-step guide
...
- Ben Hollenbeck can get you a certificate from a service like Digicert and Yamini Kannankutti (Unlicensed) can Convert the Certificate to .pfx format
- The Salesforce Administrator must then go to Setup >>Certificate and Key Management and find the expiring certificate. Refer to tutorial
- The Salesforce Administrator can then Install the SSL certificate as described below
https://help.salesforce.com/articleView?id=000339841&type=1&mode=1
Finally Merge a complete certificate chain for custom HTTPS domains
https://help.salesforce.com/articleView?id=000333504&type=1&mode=1
...