Update: I regenerated the certificate with
openssl req -subj /CN=elk-master -x509 -days 3650 -batch -nodes -newkey rsa:4096 -keyout logstash.key -out logstash.crt
and replacing CN=IP of the machine that runs logstash. now everything works with ssl in filebeat config file.
Thanks a lot @thiago ..