As of version 5.7 you can now install a SSL certificate via plugins in WordPress. Before you do you must buy an SSL certificate or install a free one.
I have not tried these plugins yet.
I still think that going with the Bluehost starter package that includes a no hassle domain and SSL certificate is the easiest way to go.
Really Simple SSL Plugin (free)
As always a premium upgrade.
Get a Free SSL