To add a certificate, check with your hosting provider. Many will let you add a free certificate from Let’s Encrypt.) Next, you’ll need to be able to create a CAA DNS record.