Some issues with email certificates and Android 4.4.2 KitKat

Yes, my question is "why my setting didn't cause all of my own keys to be 4096 bits"

Is it normal or I must configure differently the "cli.ini" for obtain all 4096 bits keys? And especially now that the keys exist should I follow some special procedure to ask the new ones?

Thanks again!