The --keysize flag of the enecerts utility enables users to specify the size of the generated private key. The flag syntax is:

--keysize bits
               

where bits is the private key size in bits. (The default value is 1024.)

For example, the following Windows command creates certificates with a private key size of 2048 bits:

enecerts --keysize 2048

Keep in mind that using larger keys will slow system performance. A recommended alternative to the default 1024-bit size is a key size of 512 bits, which will give you a good balance between security and performance considerations.