You buy one from an SSL certificate provider. Most hosting companies partner with an SSL certificate vendor, and make it easy to buy one as an account upgrade.