fix cert generation bug: was creating 2024 bit keys instead of 2048 bit keys by default.