Added bitsize flag to change certificate key generation bitsize use the --bitsize flag (default is 4096, options are 2048 and 4096). If you want to import the certificate in Azure KeyVault you must use a 2048 bit signing key.