diff --git a/tests/cfg/pki/CAtsa.cnf b/tests/cfg/pki/CAtsa.cnf
index f5a275b..33c771d 100644
--- a/tests/cfg/pki/CAtsa.cnf
+++ b/tests/cfg/pki/CAtsa.cnf
@@ -51,7 +51,7 @@ emailAddress		= optional
 
 #----------------------------------------------------------------------
 [ req ]
-default_bits		= 1024
+default_bits		= 4096
 default_md		= sha1
 distinguished_name	= $ENV::TSDNSECT
 encrypt_rsa_key		= no