Don't generate ECC certs by default, has issues with openssl <=1.0.0