PEM File Generation

This is just an overview of the process. There are plenty of external references on how to create a self-signed certificates.

Basically,

openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes

For compatibility reasons, if you intend to connect to your bot sink via IP address, ensure the CN (Common Name) of your certificate (when queried) is the same as your actual bot server IP address.