SSL certificate in subdomains

I currently have two sites created in the IIS service on windows server
I require that these be signed with SSL certificates and remain as secure sites, does cloudflare offer these certificates? Where can they be purchased? I currently have my domain in cloudflare with the free plan

Since your site is on Cloudflare, you can use Cloudflare Origin CA certificates: