Control ID: CA-CRYPTO-001
Control Name: CA Certificate Key Size Validation
Severity: High
Status: Failure
Certificate Authority: securetron-lab-ISSUINGCA
Execution Time: 2025-10-15 22:43:13
Duration: 00:00:00.0506941

Expected Result:
CA certificate key size should be at least 4096 bits

Evidence:
CA Certificate Details:
  Subject: CN=securetron-lab-ISSUINGCA, DC=securetron-lab, DC=local
  Issuer: CN=Securetron-Lab-ROOT-CA, DC=securetron-lab, DC=local
  Thumbprint: 8CD75D1E83D24DFDF3C5E4453650AF3E0676A162
  Valid From: 2025-09-21
  Valid To: 2027-09-21
  Key Size: 2048 bits
  Minimum Required: 4096 bits (from parameters.json)
  Compliant: NO

Certificate saved to: Audit-Results/CA-CRYPTO-001-securetron-lab-ISSUINGCA.cer


Recommendation:
Reissue CA certificate with minimum 4096-bit key size for cryptographic security.
