Subodinate CA Key Length

Learning PKI 1 Reputation point
2025-08-12T16:57:01.4166667+00:00

Hi all,

After looking through all the public certificate (Eg. DigiCert,GlobalSign), I notice that most of the subordinate CA key length is 2048 bits.

May I know why nobody is using 4096 bits for subordinate CA ?

If I were to use 4096 bits for my internal Root CA and Subordinate CA, what is the impact that I may need to consider ?

Thank you

Windows for business | Windows Server | Directory services | Certificates and public key infrastructure (PKI)
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.