Some applications like Power BI require encrypted to SQL server; Here is how to configure <a href="https://www.microsoft.com/en-us/sql-server/sql-server-downloads">MS SQL Server Express</a> with it:
<ol>
<li>Get an SSL/TLS certificate from your preferred CA, ideally in PFX format. Copy it to your Windows server and install it on the machine.</li>
<li>Go to Services application and find out the user the SQL Server logs on as <img src="https://img.amo.fyi/blog/2023-12-26-ms-sql-server-express/services.png" alt="image"></li>
<li>Let's say you have got a certificate for <code>sql.example.com</code>. Open Certlm application, find your certificate and manage it's private key <img src="https://img.amo.fyi/blog/2023-12-26-ms-sql-server-express/certlm.png" alt="image"></li>
<li>You'll want give read permission to the user which SQL server logs on as <img src="https://img.amo.fyi/blog/2023-12-26-ms-sql-server-express/certlm-private-keys.png" alt="image"></li>
<li>Now, you can open SQL Server Configuration Manager and enable that certificate on it <img src="https://img.amo.fyi/blog/2023-12-26-ms-sql-server-express/sql-config-mgr-protocols-rc.png" alt="image"> <img src="https://img.amo.fyi/blog/2023-12-26-ms-sql-server-express/sql-config-mgr-protocols-prop-cert.png" alt="image"></li>
<li>Restart the SQL Server. Now any remote connections to the SQL server (<code>tcp:sql.example.com,PORT</code>) can be encrypted!</li>
</ol>

DevOps: Configuring Microsoft SQL Server Express with SSL/TLS