You don’t need Netlify DNS for a SSL certificate. Even external DNS can get SSL certificate.
Regarding how to create a certificate, that depends on tools and services you use. It’s not something specific to Netlify and thus, we cannot answer that. All I can say is we want the certificate in exactly this format: