EXTERNAL (certfp) and ECDSA-NIST256P-CHALLENGE are probably desired. The others are probably not worth it.