certmanager: perform some auto-detection to prevent issues with older openssl versions.