Portecle is a free open source program that can help with certificate management.

http://portecle.sourceforge.net/

Here is a guide on creating a new certificate.

Download and unzip Portecle. Then open the portecle.jar file.

Select new keystore from the file menu.

Use the default JKS format.

Now, select generate key pair from the tools menu.

Select your bit strength.

Fill in the information about you or your company. Make sure the common name is your website host address.

Use an alias name that is the default of your website name.

Use a password that will be used again later for the keystore password. Make it the same.

Now right click on your key pair and select generate certification request.

Save the car to your desktop or somewhere else.

Get your CSR signed by your certificate authority. (This process is different for every cert authority. But the files you download after they have signed it should be in the Java or Tomcat format for simplicity.)

Now import the ca certificates given to you by your certificate authority. These are usually things like root, or intermediate, etc.

Now, import the "signed" version of your certificate file. The CA Reply.

And finally, save your keystore!

Now you can reference this keystore in CrushFTP under the server preferences, Encryption, SSL tab. Or you can set it specifically on the advanced tab of a particular port.