diff --git a/csr.sh b/csr.sh
index 3a984f2..c0a034a 100644
--- a/csr.sh
+++ b/csr.sh
@@ -8,7 +8,7 @@ fi
 DOMAIN="home.johnhgaunt.com"
 
 for i in $HOSTNAMES; do
-    openssl req -new -sha512 -nodes -out $i.$DOMAIN.csr -newkey rsa:16384 -keyout $i.$DOMAIN.key -config <(
+    openssl req -new -sha512 -nodes -out $i.$DOMAIN.csr -newkey rsa:4096 -keyout $i.$DOMAIN.key -config <(
 cat <<-EOF
 [req]
 default_bits = 4096