Fortunately open source communities provides a free solution for developers to create a certificate.
You can find many information about this in the following sites.
https://letsencrypt.org/
https://www.openssl.org/
https://ssl.comodo.com/free-ssl-certificate.php
Below we will provide specific documentation to create certificate for Delphi XE Intraweb site in windows OS
First of all down Openssl files from this link https://www.openssl.org/source and extract them to C:
open a command prompt to c:opensslbin
run the following command:
set OPENSSL_CONF=C:OpenSSLbinopenssl.cnf
run openssl
from openssl environment run the following commands one by one
genrsa -des3 -out ca.key 4096 (at this point you have to set certificate password)
req -new -x509 -days 1826 -key ca.key -out ca.crt
genrsa -out ia.key 4096
req -new -key ia.key -out ia.csr
x509 -req -days 730 -in ia.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out ia.crt
finally exit the open ssl environment and run the following commands
rename ia.key key.pem
rename ca.crt root.pem
rename ia.crt cert.pem
The files key.pem, root.pem and cert.pem are what you need to secure your Intraweb site with a certificate.