Read the config.tcl file, it should have enough comments to get you going. You can create a self-signed certificate for testing. There should be plenty of documentation to use OpenSSL to create a self-signed cert.