either way an ssl certificate has to be purchased whether it be by yourself or by the hosting provider in order for the https to be made available. sure you can have a self issued one used but they are not reliable or acceptable in the eyes of payment and merchant gateway providers.