is certificate a must for SSL?

[kbird]

is certificate from the third party a must for implementing SSL?

[mmetzger]

If you don't want to have an error appear when viewing the cert - you must have a certificate issued by a trusted certificate authority. You can generate your own for testing (look at makecert.exe) but these will cause the browser to throw a warning before allowing a connection.