$ 0 0 certificates under 1024 are blocked http://blogs.technet.com/b/pki/archive/2012/06/12/rsa-keys-under-1024-bits-are-blocked.a