Win10/Win11 will no longer support RSA key certificates shorter than 2048 bits

Microsoft has decided to no longer support certificates with RSA key generation shorter than 2048 bits.

Internet standards and regulators explicitly prohibited the use of 1024 bit keys in 2013, and strongly recommended that the RSA key should be 2048 bits or longer.
This abandonment is mainly to ensure that the key length of all RSA certificates used for TLS server authentication must be greater than or equal to 2048 bits for Windows to consider them valid.
TLS certificates issued by enterprises or testing certification bodies (CAs) are not affected by this change. However, as a security best practice, we recommend updating them with RSA keys greater than or equal to 2048 bits.
This change is crucial for protecting the security of Windows users and improving the security of authentication and encryption.