Hi, you can create a new feature request here: https://github.com/webprofusion/certify/issues
As mentioned in my limited testing (windows server 2016, CTW 4.1.6) the pfx generated had keyspec=1 so if you can provide information about the OS version you are running etc that might help.