From Dec 20th 2010 onwards, we will no longer issue certificates of less than 2048 bit key length and will not accept Certificate Signing Requests (CSRs) generated with keys of less than 2048 bit. This is in line with the NIST guidelines http://csrc.nist.gov/publications/nistpubs/800-57/sp800-57-Part1-revised2_Mar08-2007.pdf, as well as the policies of Mozilla https://wiki.mozilla.org/CA:MD5and1024, Microsoft http://technet.microsoft.com/en-us/library/cc751157.aspx and other browser and platform vendors.

Partners and customers of partners can continue to use existing 1024 bit certificates on their websites after this date but, at renewal time, they must generate CSRs using 2048 bit keys. We will, of course, replace any 1024 bit certificate free of charge at any time. To obtain a replacement, customers need to generate a new CSR with a 2048 bit key, and submit it for replacement via Comodo Support www.completessl.com/account/helpdesk.php.