Welcome, LeoW,
I suggest you look into the resources that @dan has already provided re: SSL certificates, both from external providers as well as from a local CA. I’d also refer to this post of his. I use @dan’s excellent tools to not only secure my trueNAS’ but to also deploy SSLs to various network equipment, see his GitHub repo.