If you create your own cert with OpenSSL, many or most browsers are going to warn the user that it's not a "real" cert.
You can get an SSL cert from most domain registers or hosting companies (ie, GoDaddy, NameCheap, Enom, etc). Also, there is one free provider: http://www.startssl.com/?app=1
