Using RSA in 2023 for a CA that is expected to be around for an extended period of time is just silly. ECDSA 384 or longer depending on the expected CA lifetim

Using RSA in 2023 for a CA that is expected to be around for an extended period of time is just silly. ECDSA 384 or longer depending on the expected CA lifetime and security margins (see https://www.keylength.com/ https://www.keylength.com/) is a saner choice. Also, https://blog.trailofbits.com/2019/07/08/fuck-rsa/ https://blog.trailofbits.com/2019/07/08/fuck-rsa/