Changed to SHA256, 4096 bit AES-256-CBC CA key, 2048 host key, added CRL