9cfcad5
Get vague about what we expect from certutil When checking the size of DSA keys generated by certutil, take account of the fact that the key size usually doesn't grow beyond 1024 bits, and is often one or more bits shorter than the requested size.