Your question can easily been answered by using the search function of this forum or just by asking aunt G..
The file isn’t created by Nextcloud but by OpenSSL in the home directory of the user under which the web server is running. Don’t use the Nextcloud root as the home directory of that user and you will solve the problem. See e.g. :