Upgrade signing cert to RSA 2048