fix NO_RSA ecc command line examples default certs