Just use 4k RSA certificates while at it