--- a/doc/dovecot-openssl.cnf
+++ b/doc/dovecot-openssl.cnf
@@ -1,5 +1,5 @@
 [ req ]
-default_bits = 2048
+default_bits = 3072
 encrypt_key = yes
 distinguished_name = req_dn
 x509_extensions = cert_type
