From this [0] list it seems there are a bunch of RSA root certificates, but they all use RSA 2048 or 4096, both of which are still secure (with 4096 having dimi

From this [0] list it seems there are a bunch of RSA root certificates, but they all use RSA 2048 or 4096, both of which are still secure (with 4096 having diminishing returns compared to RSA 2048 [1]). The article was about RSA 512 which has been known to be weak and crackable for a long time [2]. [0]: https://github.com/eu-digital-green-certificates/dgc-participating-countries/issues/10#issuecomment-874838426 https://github.com/eu-digital-green-certificates/dgc-partici... [1]: https://www.gnupg.org/faq/gnupg-faq.html#no_default_of_rsa4096 https://www.gnupg.org/faq/gnupg-faq.html#no_default_of_rsa40... [2]: https://it.slashdot.org/story/99/08/29/0213230/512-bit-rsa-key-cracked https://it.slashdot.org/story/99/08/29/0213230/512-bit-rsa-k...