When loading a certificate from the Windows Certificate Store into OpenSSL on Windows, the code assumes the certificate has an RSA key. This will fail to load non-RSA certificates.
Our OpenSSL-CAPI translation layer should at least support NIST curves for ECDH and ECDSA.