Wrong bit length

Certbot changed its default key type to ECDSA in version 2.0.

You need to use --key-type rsa if you want to keep using RSA.

5 Likes