Update DNS key sig algorithm to SHA256, 2048 bit length.