Right now "univention-certificate" creates certificates always with a private key length of 1024 bits. This should be configurable via UCR, just like most parameters (validity time span, hash function, contact e-mail ...) already are.
*** This bug has been marked as a duplicate of bug 30545 ***