Fix weak keys so we can check the root certificate key length