Hey, I didn't change the key used for signing, it's still the same "build-uefi@opensuse.org" key used for all opensuse ssl signatures. Dunno what exactly you're testing. And the signkey was *always* 2048 bit, the CA key was 4096 key at some point in time.