20250820 - Changing key sizes for RGS certificates
From January 1 , 2026, the minimum size required for RSA keys used to produce RGS certificates will increase to 3000-bit.
Why?
This is a recommendation from the SOG-IS (Senior Officials Group Information Systems Security), a European agreement on the certification and evaluation of information systems security.
The latter aims to unify the certification rules of member countries (including France via ANSSI) to ensure mutual recognition of certificates issued by the national bodies of participating countries.
This agreement provides, among other things, a deadline for the use of RSA keys whose size is less than 3000-bit set at December 31, 2025.
Which products are affected?
All certificates meeting the RGS standard must respect this key size: SSL certificates, seals and even client servers are therefore concerned.
What are the consequences for certificates issued before this date?
None. Certificates issued before January 1 , 2026, using a 2048-bit key will remain valid until their expiration date. However, if they are reissued after the deadline, they will need to comply with this new standard.