fix: "key and cert do not match"

cm.sh

@@ -35,6 +35,7 @@
 # 2022-05-19  <axel.hahn@iml.unibe.ch>  add timer and debug.log
 # 2022-05-20  <axel.hahn@iml.unibe.ch>  update _wait_4_free_slot and data in debug.log
 # 2023-02-01  <axel.hahn@unibe.ch>      skip function _fixKeyfile with former workaround
+# 2023-05-08  <axel.hahn@unibe.ch>      fix: "key and cert do not match"
 # ======================================================================
 
 
@@ -467,6 +468,9 @@ function public_add(){
 		fi
 	done
 
+	# 2023-05-08: Specifies the domain key length
+	_params+="--keylength 2048 "
+
 	_wd "--- create output dir $dircerts"
 	mkdir -p "${CM_dircerts}" 2>/dev/null