If the keysize of a certificate, or certificate signing request has a keysize greater than 2048, the task will fail in 9.0.x
9.0.x
9.1.x
Only 2048 bit keysize is supported in 9.0
All hosts need to be upgraded to 9.1 to avail of 2048, 3072 and 4096 bit keyszes.