See https://letsencrypt.org/docs/integration-guide#supported-key-algorithms and https://scotthelme.co.uk/hybrid-rsa-and-ecdsa-certificates-with-nginx/