diff --git a/root/etc/cont-init.d/50-config b/root/etc/cont-init.d/50-config
index 21cc80d..5ea826e 100644
--- a/root/etc/cont-init.d/50-config
+++ b/root/etc/cont-init.d/50-config
@@ -340,7 +340,7 @@ if [ ! -f "/config/keys/letsencrypt/fullchain.pem" ]; then
     fi
     echo "Generating new certificate"
     # shellcheck disable=SC2086
-    certbot certonly --renew-by-default --server $ACMESERVER $ZEROSSL_EAB $PREFCHAL --rsa-key-size 4096 $EMAILPARAM --agree-tos $URL_REAL
+    certbot certonly --renew-by-default --server $ACMESERVER $ZEROSSL_EAB $PREFCHAL --elliptic-curve secp384r1 --key-type ecdsa $EMAILPARAM --agree-tos $URL_REAL
     if [ -d /config/keys/letsencrypt ]; then
         cd /config/keys/letsencrypt || exit
     else