If I have "Force Protocol Encryption" turned off, then it should not need any certificate.
But when I see my event log always I found that:
"A self-generated certificate was successfully loaded for encryption."

After windows update the server reboots itself and it does not generate this certificate and my SQL server won't start.

Event Log:

FallBack certificate initialization failed with error code: 1.
Unable to initialize SSL encryption because a valid certificate could not be found, and it is not possible to create a self-signed certificate.
TDSSNIClient initialization failed with error 0x80092004, status code 0x80.
TDSSNIClient initialization failed with error 0x80092004, status code 0x1.
Could not start the network library because of an internal error in the network library. To determine the cause, review the errors immediately preceding this one in the error log.
SQL Server could not spawn FRunCM thread. Check the SQL Server error log and the Windows event logs for information about possible related problems.

When I reboot the machine manually then it starts again.