Please follow the steps below to generate your Certificate Signing Request (CSR) with OpenSSL :
apt-get install openssl
sudo a2enmod ssl
sudo service apache2 force-reload
cd /etc/apache2
openssl genrsa -out my_domain_name_com.key 2048
openssl req -new -newkey rsa:2048 -nodes -sha256 -out my_domain_name_com.csr -key my_domain_name_com.key
openssl req -text -noout -in my_domain_name_com.csr
Once these steps are completed, you can check your new CSR with Apache OpenSSL.
Buy a cheap SSL certificate (Digicert, Thawte, GeoTrust ...)