Certificate wizard Choose "Web server SSL/TLS certificate"
generate strong password for private key
save private key as ssl.key open terminal and execute "openssl rsa -in ssl.key -out ssl.key" insert password generated above when prompted
select correct domain type in subdomain
copy and paste cert text into ssl.crt download intermediate and root files
in terminal execute "openssl pkcs12 -export -in ssl.crt -inkey ssl.key -certfile sub.class1.server.ca.pem -out your-cert.pfx -password pass:"
now upload to azure, with password