If the listener uses the TERMINATED_HTTPS protocol, then one or more SSL certificates must be selected. The first certificate will be the default.

Use the key-manager service to create any certificate containers before creating the listener. The following documentation provides information on how to create a certificate container:

- Key Manager API Guide: Creating a Certificate Container
- Key Manager Service Command-Line Client