How to create custom URL domain and import a TLS certificate to customize the hosted sign-in widget?

I would like to make a hosted sign-in widget with okta.
the problem is that to integrate the facebook login button I have to set a “Custom Sing In” but to make this, I need to set up a custom Url domain.
How can create a custom domain and import a TLS certificate to customize the hosted sign-in widget? I would like to make it for free.

I’ve found these links until now:
https://developer.okta.com/docs/guides/custom-url-domain/overview/
https://developer.okta.com/docs/guides/custom-url-domain/gather-information/