Generating SSL/TLS certificates for your website is much easier than you think on a windows operating system like Windows 10. A commercial certificate provider can charge you a lot and Let’s Encrypt is free but issue certificate for 90 days. We can extend these for free for a lifetime. Let us see how to generate and renew Let’s Encrypt certificate.
Download the latest version of the Certbot installer for Windows at https://dl.eff.org/certbot-beta-installer-win32.exe.
Run the installer and follow the wizard. The installer will propose a default installation directory, C:\Program Files(x86)
select the Start menu, enter cmd (to run CMD.EXE) or PowerShell (to run PowerShell), and click on “Run as administrator”
Run the following command certbot certonly –manual
Enter your website name when prompted. If you need a certificate for multiple domains, you can add wildcard.

Choose your option

Create a DNS TXT record by going to your hosting provider and DNS settings for your domain.

Will look something like the following based on your hosting provider.

Create a file on your website with the mentioned parameters.

If all the above steps are correct, you should receive the following Congratulations message.

Now the certificate is generated. Login to your CPanel account and find SSL/TLS settings.
Click “Install and Manage SSL for your site (HTTPS)” and upload your Certificate (fullchain.pem) and private key (privkey.pem)
Map the current uploaded certificate to your website and test by browsing.