The pasted certificate or request uses a weak public key.

PEM_WEAK_KEY · Severity: Warning

• WarningPEM_WEAK_KEY

  The pasted certificate or request uses a weak public key.

  RSA keys below 2048 bits and elliptic-curve keys below 256 bits are no longer accepted by certificate authorities and current clients (CA/Browser Forum Baseline Requirements 6.1.5).

  Recommendation: Generate a new key of at least 2048 bits (RSA) or P-256 (ECDSA).

Reported by

• CSR decoder
• PEM certificate decoder

Available through the API

• CSR decoder API
• PEM certificate decoder API

Related findings

• Warning PEM_WEAK_SIGNATURE The pasted certificate or request is signed with SHA-1 or MD5.
• Error PEM_INVALID The PEM block cannot be decoded.
• Info PEM_PERSONAL_DATA_OMITTED Email addresses and personal name types were left out of the result.

All findings