How can I generate a certificate with a 2048 bit private key?

Sure, you can use any third-party software to do that:

You’ll need to recreate the certificate at least every 90 days.

The easiest option may be web-based clients, like https://www.zerossl.com/.