Simply follow the steps on the Pantheon dashboard. You can skip the domain verification - SSL will be configured within a couple of hours despite the warning messages.

If you are "updating" an older domain to use Pantheon, ensure you have main campus remove any previous A/AAA/Cname records.