the certificate is also used for TLS, the old SSL method shouldn’t be used anyway.
I think latest Openfire generates certificates and enables TLS by default. You can check any Store. It’s the same in default configuration. Or check XMPP clients one.