Use up to date key size (4096 Bytes) for CA and other certificates
Use SHA-512 hash also for CA cert