512 bit RSA used to be common in publicly-trusted certificates. That's very easily breakable on today's hardware. If quantum computers happen, all existing key

512 bit RSA used to be common in publicly-trusted certificates. That's very easily breakable on today's hardware. If quantum computers happen, all existing keys in the WebPKI will be broken.