We have a new certificate service were our root certificate is signed using 8k key. That key is then seen on the certificate chain.
OID certificate itself was planned to use 4k key, but because of the root certificate (8k), OID do not accept the key.
Is there any workaround to this problem?
We don't like to decrease whole our certificate chain security just for one application if there is any possibility to avoid that.