Some services require a cert to work. This is determined by the developers, OS and packagers. Defaults get installed by the OS in this case. Generally these generic options are a bad idea for public facing services. If you get another cert, like Let’s Encrypt, you are given the option to use it instead.
At least that’s what I think is happening. If you used the server internally then you could just keep the defaults.