Need to replace Self-Signed SSL Cert with a trusted Cert

I would like to replace the Self-Signed SSL Cert with a more trusted one.   

We should have the ability to use either a 3rd party SSL cert or one on our private CA.   This will close a number of vulnerabilities and is a good practice.