If your environment has Windows Server (2008) with Active Directory Certificate Services (AD CS) installed, you can use it to request a signed certificate.
Before you begin: You will need to generate a certificate signing requests.
http://<ip.or.fqdn.of.windows.ca.server>/certsrv
Click the Request a certificate link:
Certificate Request
Click advanced certificate request
Advanced Certificate Request
Select Web Server from the Certificate Template drop-down menu.
Submit Certificate Request
Click Submit. You will be presented with a screen to download the signed certificate:
Issued Certificate