perhaps this is stupid question as it should be quite easy, but since the firewall is in production use,
it can`t harm to pre-check it with someone who already did it.

I know how the CA works in details, first we generate a CSR which is sent to for example in my case to http://www.rapidssl.com/ and than
they will generate .cert file and send it back to me ready for installation.

But I would like to know how to accomplish this in pfSense firewall (configurations) etc…

Thank You
Tom