If the listener uses the TERMINATED_HTTPS protocol, then one or more SSL certificates must
  be selected. The first certificate will be the default.
  
    Use the key-manager service to create any certificate containers before creating the listener.
    The following documentation provides information on how to create a certificate container: