the certs used to be created by the sysv-init/upstart script in the past on first start of sshd ... perhaps that changed with the switch to systemd so you would need a separate script
the certs used to be created by the sysv-init/upstart script in the past on first start of sshd ... perhaps that changed with the switch to systemd so you would need a separate script