diff --git a/ssl/mkcerts.sh b/ssl/mkcerts.sh
index 70fe0770..8ff09719 100755
--- a/ssl/mkcerts.sh
+++ b/ssl/mkcerts.sh
@@ -6,7 +6,7 @@ echo '1000' > serial
 touch index.txt
 
 echo Creating Root CA 
-openssl genrsa -des3 -out root-ca.key 2048
+openssl genrsa -des3 -out root-ca.key 1536 -config openssl.cnf
 openssl req -new -x509 -days 3650 -key root-ca.key -out root-ca.crt -config openssl.cnf
 
 echo Creating AC Req