added check for min keysize when issuing certificates