Change x509 to actually enforce 2048 bit lower limit for key size.