Most S/MIME certificate authorities require the generation of private keys using the "keygen" tag. Most browsers that support this tag require the generated key

Most S/MIME certificate authorities require the generation of private keys using the "keygen" tag. Most browsers that support this tag require the generated key length to be 1024 or 2048 bits, whereas forcing either 2048 or 4096 bit keys would be more sensible. https://bugzilla.mozilla.org/show_bug.cgi?id=495836 https://bugzilla.mozilla.org/show_bug.cgi?id=495836