Checks

Certificate public key is short

The certificate's RSA key is shorter than 2048 bits.

Why it matters

Short RSA keys can be factored, which lets someone impersonate the site.

What to do

Reissue with a 2048-bit or larger RSA key, or use an elliptic-curve key.

Reference

Certificate validity, protocol version, and cipher choice determine TLS trust and strength.

Mozilla SSL Configuration Generator